관리-도구
편집 파일: __init__.cpython-39.pyc
a �#/d�A � @ s� d Z ddlZddlZddlZddlmZ ddlmZm Z m Z m Z m Z ddl mZmZ e�e�ZdZdZdZeZd Zd Zd ZeZd ZeeeeeeefZ d Z dZ dZ dZ G dd� d�Z!dS )a� oauthlib.oauth1.rfc5849 ~~~~~~~~~~~~~~ This module is an implementation of various logic needed for signing and checking OAuth 1.0 RFC 5849 requests. It supports all three standard signature methods defined in RFC 5849: - HMAC-SHA1 - RSA-SHA1 - PLAINTEXT It also supports signature methods that are not defined in RFC 5849. These are based on the standard ones but replace SHA-1 with the more secure SHA-256: - HMAC-SHA256 - RSA-SHA256 � N)�Request�generate_nonce�generate_timestamp� to_unicode� urlencode� )� parameters� signaturez HMAC-SHA1z HMAC-SHA256z HMAC-SHA512zRSA-SHA1z RSA-SHA256z RSA-SHA512Z PLAINTEXTZ AUTH_HEADERZQUERYZBODY�!application/x-www-form-urlencodedc @ s� e Zd ZdZeejeeje ej e ej e ejeejeejiZedd� �Zddddeedddddddf dd�Zdd � Zd d � Zd d � Zddd�Zddd�Z dS )�Clientz2A client used to sign OAuth 1.0 RFC 5849 requests.c C s || j |< d S �N)�SIGNATURE_METHODS)�clsZ method_nameZmethod_callback� r �D/usr/lib/python3.9/site-packages/oauthlib/oauth1/rfc5849/__init__.py�register_signature_methodY s z Client.register_signature_methodN�utf-8c s� � fdd�}||�| _ ||�| _||�| _||�| _||�| _||�| _||�| _||�| _|| �| _|| �| _ |� �| _ || �| _ || �| _ ||�| _ dS )a� Create an OAuth 1 client. :param client_key: Client key (consumer key), mandatory. :param resource_owner_key: Resource owner key (oauth token). :param resource_owner_secret: Resource owner secret (oauth token secret). :param callback_uri: Callback used when obtaining request token. :param signature_method: SIGNATURE_HMAC, SIGNATURE_RSA or SIGNATURE_PLAINTEXT. :param signature_type: SIGNATURE_TYPE_AUTH_HEADER (default), SIGNATURE_TYPE_QUERY or SIGNATURE_TYPE_BODY depending on where you want to embed the oauth credentials. :param rsa_key: RSA key used with SIGNATURE_RSA. :param verifier: Verifier used when obtaining an access token. :param realm: Realm (scope) to which access is being requested. :param encoding: If you provide non-unicode input you may use this to have oauthlib automatically convert. :param decoding: If you wish that the returned uri, headers and body from sign be encoded back from unicode, then set decoding to your preferred encoding, i.e. utf-8. :param nonce: Use this nonce instead of generating one. (Mainly for testing) :param timestamp: Use this timestamp instead of using current. (Mainly for testing) c s � rt | � �S | S r )r )�x��encodingr r �<lambda>~ � z!Client.__init__.<locals>.<lambda>N)� client_key� client_secret�resource_owner_key�resource_owner_secret�signature_method�signature_type� callback_uri�rsa_key�verifier�realmr �decoding�nonce� timestamp)�selfr r r r r r r r r r! r r" r# r$ �encoder r r �__init__] s ! zClient.__init__c C sp t | ��� }|d rdnd |d< |d r,dnd |d< |d r@dnd |d< d�dd� |�� D ��}d�| jj|�S ) Nr z****r r z, c s s | ]\}}d � ||�V qdS )z{}={}N)�format)�.0�k�vr r r � <genexpr>� r z"Client.__repr__.<locals>.<genexpr>z<{} {}>)�vars�copy�join�itemsr( � __class__�__name__)r% �attrsZ attribute_strr r r �__repr__� s ��zClient.__repr__c C s� | j tkrt�| j| j�S | �|�\}}}tjt�|�j ||d�}t � d� |�� t� |�}t�||�dd��}t � d� |�� t � d� |�� t�|j||�}t � d� |�� | j | jvr�td��| j| j || �} t � d � | �� | S ) aw Get an OAuth signature to be used in signing a request To satisfy `section 3.4.1.2`_ item 2, if the request argument's headers dict attribute contains a Host item, its value will replace any netloc part of the request argument's uri attribute value. .. _`section 3.4.1.2`: https://tools.ietf.org/html/rfc5849#section-3.4.1.2 )Z uri_query�body�headerszCollected params: {}ZHostNzNormalized params: {}zNormalized URI: {}z"Signing: signature base string: {}zInvalid signature method.z Signature: {})r �SIGNATURE_PLAINTEXTr Zsign_plaintextr r �_renderZcollect_parameters�urlparse�query�log�debugr( Znormalize_parametersZbase_string_uri�getZsignature_base_string� http_methodr � ValueError) r% �request�urir6 r5 Zcollected_paramsZnormalized_paramsZnormalized_uriZ base_stringZsigr r r �get_oauth_signature� s0 � � � zClient.get_oauth_signaturec C s� | j du rt� n| j }| jdu r&t� n| j}d|fd|fdd| jfd| jfg}| jrd|�d| jf� | jrz|�d| jf� | j r�|�d | j f� |j � d d�}|o�|� d �d k }|j dur�|r�|�d t�t�|j �d���� ��d�f� |S )zMGet the basic OAuth parameters to be used in generating a signature. NZ oauth_nonceZoauth_timestamp)Z oauth_versionz1.0Zoauth_signature_methodZoauth_consumer_keyZ oauth_tokenZoauth_callbackZoauth_verifier� Content-Typer r Zoauth_body_hashr )r# r r$ r r r r �appendr r r6 r= �findr5 �base64Z b64encode�hashlibZsha1r& �digest�decode)r% r@ r# r$ �params� content_typeZcontent_type_eligibler r r �get_oauth_params� s2 ����� ,zClient.get_oauth_paramsFc C s� |j |j|j }}}| jtkr6tj|j|j|d�}n^| jtkrp|j durpt� |j|j �}|rft |�}d|d< n$| jt kr�t� |j|j �}ntd��|||fS )a Render a signed request according to signature type Returns a 3-tuple containing the request URI, headers, and body. If the formencode argument is True and the body contains parameters, it is escaped and returned as a valid formencoded string. )r! Nr rC z!Unknown signature type specified.)rA r6 r5 r �SIGNATURE_TYPE_AUTH_HEADERr Zprepare_headers� oauth_params�SIGNATURE_TYPE_BODY� decoded_bodyZprepare_form_encoded_bodyr �SIGNATURE_TYPE_QUERYZprepare_request_uri_queryr? )r% r@ � formencoder! rA r6 r5 r r r r8 � s$ �� �zClient._render�GETc C sp t ||||| jd�}|j�dd�}|o.|�d�}|tk} |jdu} |rT| rTtd��nh| rf| sftd��nV| s�| r�td�|pzdt���n8| j t kr�| r�| r�|r�td ��n|� � d v r�| r�td ��| � |�|_ |j �d | �|�f� | j|d |p�| jd�\}}}| j�rft�d| j� |�| j�}|�r.|�| j�n|}i } |�� D ]"\} } | �| j�| | �| j�< �q>| }|||fS )aF Sign a request Signs an HTTP request with the specified parts. Returns a 3-tuple of the signed request's URI, headers, and body. Note that http_method is not returned as it is unaffected by the OAuth signing process. Also worth noting is that duplicate parameters will be included in the signature, regardless of where they are specified (query, body). The body argument may be a dict, a list of 2-tuples, or a formencoded string. The Content-Type header must be 'application/x-www-form-urlencoded' if it is present. If the body argument is not one of the above, it will be returned verbatim as it is unaffected by the OAuth signing process. Attempting to sign a request with non-formencoded data using the OAuth body signature type is invalid and will raise an exception. If the body does contain parameters, it will be returned as a properly- formatted formencoded string. Body may not be included if the http_method is either GET or HEAD as this changes the semantic meaning of the request. All string data MUST be unicode or be encoded with the same encoding scheme supplied to the Client constructor, default utf-8. This includes strings inside body dicts, for example. r rC Nz multipart/z?Headers indicate a multipart body but body contains parameters.z?Headers indicate a formencoded body but body was not decodable.zEBody contains parameters but Content-Type header was {} instead of {}znot setz=Body signatures may only be used with form-urlencoded content)rS ZHEADz*GET/HEAD requests should not include body.Zoauth_signatureT)rR r! z%Encoding URI, headers and body to %s.)r r r6 r= � startswith� CONTENT_TYPE_FORM_URLENCODEDrP r? r( r rO �upperrL rN rD rB r8 r! r" r; r< r& r0 )r% rA r> r5 r6 r! r@ rK Z multipartZshould_have_paramsZ has_paramsZ new_headersr* r+ r r r �sign sd � ���� ���� �� z Client.sign)FN)rS NNN) r2 � __module__� __qualname__�__doc__�SIGNATURE_HMAC_SHA1r Zsign_hmac_sha1_with_client�SIGNATURE_HMAC_SHA256Z sign_hmac_sha256_with_client�SIGNATURE_HMAC_SHA512Z sign_hmac_sha512_with_client�SIGNATURE_RSA_SHA1Zsign_rsa_sha1_with_client�SIGNATURE_RSA_SHA256Zsign_rsa_sha256_with_client�SIGNATURE_RSA_SHA512Zsign_rsa_sha512_with_clientr7 Zsign_plaintext_with_clientr � classmethodr rM r' r4 rB rL r8 rW r r r r r J s4 � � 2 )# %r )"rZ rF rG Zlogging� urllib.parse�parser9 Zoauthlib.commonr r r r r � r r Z getLoggerr2 r; r[ r\ r] ZSIGNATURE_HMACr^ r_ r` Z SIGNATURE_RSAr7 r rM rQ rO rU r r r r r �<module> s: �