Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(56)

Unified Diff: third_party/gsutil/20110627/boto/boto/auth.py

Issue 10199002: Upgrade gsutil to 3.4 (Closed) Base URL: https://dart.googlecode.com/svn/branches/bleeding_edge/dart
Patch Set: Addressed comments Created 8 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/gsutil/20110627/boto/boto/auth.py
diff --git a/third_party/gsutil/20110627/boto/boto/auth.py b/third_party/gsutil/20110627/boto/boto/auth.py
deleted file mode 100644
index f27f9b4a10eb9898a9d5d80464bca79a6b19d454..0000000000000000000000000000000000000000
--- a/third_party/gsutil/20110627/boto/boto/auth.py
+++ /dev/null
@@ -1,320 +0,0 @@
-# Copyright 2010 Google Inc.
-# Copyright (c) 2011 Mitch Garnaat http://garnaat.org/
-# Copyright (c) 2011, Eucalyptus Systems, Inc.
-#
-# Permission is hereby granted, free of charge, to any person obtaining a
-# copy of this software and associated documentation files (the
-# "Software"), to deal in the Software without restriction, including
-# without limitation the rights to use, copy, modify, merge, publish, dis-
-# tribute, sublicense, and/or sell copies of the Software, and to permit
-# persons to whom the Software is furnished to do so, subject to the fol-
-# lowing conditions:
-#
-# The above copyright notice and this permission notice shall be included
-# in all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
-# OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABIL-
-# ITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
-# SHALL THE AUTHOR BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-# WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
-# IN THE SOFTWARE.
-
-
-"""
-Handles authentication required to AWS and GS
-"""
-
-import base64
-import boto
-import boto.auth_handler
-import boto.exception
-import boto.plugin
-import boto.utils
-import hmac
-import sys
-import time
-import urllib
-
-from boto.auth_handler import AuthHandler
-from boto.exception import BotoClientError
-#
-# the following is necessary because of the incompatibilities
-# between Python 2.4, 2.5, and 2.6 as well as the fact that some
-# people running 2.4 have installed hashlib as a separate module
-# this fix was provided by boto user mccormix.
-# see: http://code.google.com/p/boto/issues/detail?id=172
-# for more details.
-#
-try:
- from hashlib import sha1 as sha
- from hashlib import sha256 as sha256
-
- if sys.version[:3] == "2.4":
- # we are using an hmac that expects a .new() method.
- class Faker:
- def __init__(self, which):
- self.which = which
- self.digest_size = self.which().digest_size
-
- def new(self, *args, **kwargs):
- return self.which(*args, **kwargs)
-
- sha = Faker(sha)
- sha256 = Faker(sha256)
-
-except ImportError:
- import sha
- sha256 = None
-
-class HmacKeys(object):
- """Key based Auth handler helper."""
-
- def __init__(self, host, config, provider):
- if provider.access_key is None or provider.secret_key is None:
- raise boto.auth_handler.NotReadyToAuthenticate()
- self._provider = provider
- self._hmac = hmac.new(self._provider.secret_key, digestmod=sha)
- if sha256:
- self._hmac_256 = hmac.new(self._provider.secret_key, digestmod=sha256)
- else:
- self._hmac_256 = None
-
- def algorithm(self):
- if self._hmac_256:
- return 'HmacSHA256'
- else:
- return 'HmacSHA1'
-
- def sign_string(self, string_to_sign):
- boto.log.debug('Canonical: %s' % string_to_sign)
- if self._hmac_256:
- hmac = self._hmac_256.copy()
- else:
- hmac = self._hmac.copy()
- hmac.update(string_to_sign)
- return base64.encodestring(hmac.digest()).strip()
-
-class HmacAuthV1Handler(AuthHandler, HmacKeys):
- """ Implements the HMAC request signing used by S3 and GS."""
-
- capability = ['hmac-v1', 's3']
-
- def __init__(self, host, config, provider):
- AuthHandler.__init__(self, host, config, provider)
- HmacKeys.__init__(self, host, config, provider)
- self._hmac_256 = None
-
- def add_auth(self, http_request, **kwargs):
- headers = http_request.headers
- method = http_request.method
- auth_path = http_request.auth_path
- if not headers.has_key('Date'):
- headers['Date'] = time.strftime("%a, %d %b %Y %H:%M:%S GMT",
- time.gmtime())
-
- c_string = boto.utils.canonical_string(method, auth_path, headers,
- None, self._provider)
- b64_hmac = self.sign_string(c_string)
- auth_hdr = self._provider.auth_header
- headers['Authorization'] = ("%s %s:%s" %
- (auth_hdr,
- self._provider.access_key, b64_hmac))
-
-class HmacAuthV2Handler(AuthHandler, HmacKeys):
- """
- Implements the simplified HMAC authorization used by CloudFront.
- """
- capability = ['hmac-v2', 'cloudfront']
-
- def __init__(self, host, config, provider):
- AuthHandler.__init__(self, host, config, provider)
- HmacKeys.__init__(self, host, config, provider)
- self._hmac_256 = None
-
- def add_auth(self, http_request, **kwargs):
- headers = http_request.headers
- if not headers.has_key('Date'):
- headers['Date'] = time.strftime("%a, %d %b %Y %H:%M:%S GMT",
- time.gmtime())
-
- b64_hmac = self.sign_string(headers['Date'])
- auth_hdr = self._provider.auth_header
- headers['Authorization'] = ("%s %s:%s" %
- (auth_hdr,
- self._provider.access_key, b64_hmac))
-
-class HmacAuthV3Handler(AuthHandler, HmacKeys):
- """Implements the new Version 3 HMAC authorization used by Route53."""
-
- capability = ['hmac-v3', 'route53', 'ses']
-
- def __init__(self, host, config, provider):
- AuthHandler.__init__(self, host, config, provider)
- HmacKeys.__init__(self, host, config, provider)
-
- def add_auth(self, http_request, **kwargs):
- headers = http_request.headers
- if not headers.has_key('Date'):
- headers['Date'] = time.strftime("%a, %d %b %Y %H:%M:%S GMT",
- time.gmtime())
-
- b64_hmac = self.sign_string(headers['Date'])
- s = "AWS3-HTTPS AWSAccessKeyId=%s," % self._provider.access_key
- s += "Algorithm=%s,Signature=%s" % (self.algorithm(), b64_hmac)
- headers['X-Amzn-Authorization'] = s
-
-class QuerySignatureHelper(HmacKeys):
- """Helper for Query signature based Auth handler.
-
- Concrete sub class need to implement _calc_sigature method.
- """
-
- def add_auth(self, http_request, **kwargs):
- headers = http_request.headers
- params = http_request.params
- params['AWSAccessKeyId'] = self._provider.access_key
- params['SignatureVersion'] = self.SignatureVersion
- params['Timestamp'] = boto.utils.get_ts()
- qs, signature = self._calc_signature(
- http_request.params, http_request.method,
- http_request.auth_path, http_request.host)
- boto.log.debug('query_string: %s Signature: %s' % (qs, signature))
- if http_request.method == 'POST':
- headers['Content-Type'] = 'application/x-www-form-urlencoded; charset=UTF-8'
- http_request.body = qs + '&Signature=' + urllib.quote(signature)
- else:
- http_request.body = ''
- # if this is a retried request, the qs from the previous try will
- # already be there, we need to get rid of that and rebuild it
- http_request.path = http_request.path.split('?')[0]
- http_request.path = (http_request.path + '?' + qs + '&Signature=' + urllib.quote(signature))
-
-class QuerySignatureV0AuthHandler(QuerySignatureHelper, AuthHandler):
- """Provides Signature V0 Signing"""
-
- SignatureVersion = 0
- capability = ['sign-v0']
-
- def _calc_signature(self, params, *args):
- boto.log.debug('using _calc_signature_0')
- hmac = self._hmac.copy()
- s = params['Action'] + params['Timestamp']
- hmac.update(s)
- keys = params.keys()
- keys.sort(cmp = lambda x, y: cmp(x.lower(), y.lower()))
- pairs = []
- for key in keys:
- val = boto.utils.get_utf8_value(params[key])
- pairs.append(key + '=' + urllib.quote(val))
- qs = '&'.join(pairs)
- return (qs, base64.b64encode(hmac.digest()))
-
-class QuerySignatureV1AuthHandler(QuerySignatureHelper, AuthHandler):
- """
- Provides Query Signature V1 Authentication.
- """
-
- SignatureVersion = 1
- capability = ['sign-v1', 'mturk']
-
- def _calc_signature(self, params, *args):
- boto.log.debug('using _calc_signature_1')
- hmac = self._hmac.copy()
- keys = params.keys()
- keys.sort(cmp = lambda x, y: cmp(x.lower(), y.lower()))
- pairs = []
- for key in keys:
- hmac.update(key)
- val = boto.utils.get_utf8_value(params[key])
- hmac.update(val)
- pairs.append(key + '=' + urllib.quote(val))
- qs = '&'.join(pairs)
- return (qs, base64.b64encode(hmac.digest()))
-
-class QuerySignatureV2AuthHandler(QuerySignatureHelper, AuthHandler):
- """Provides Query Signature V2 Authentication."""
-
- SignatureVersion = 2
- capability = ['sign-v2', 'ec2', 'ec2', 'emr', 'fps', 'ecs',
- 'sdb', 'iam', 'rds', 'sns', 'sqs']
-
- def _calc_signature(self, params, verb, path, server_name):
- boto.log.debug('using _calc_signature_2')
- string_to_sign = '%s\n%s\n%s\n' % (verb, server_name.lower(), path)
- if self._hmac_256:
- hmac = self._hmac_256.copy()
- params['SignatureMethod'] = 'HmacSHA256'
- else:
- hmac = self._hmac.copy()
- params['SignatureMethod'] = 'HmacSHA1'
- keys = params.keys()
- keys.sort()
- pairs = []
- for key in keys:
- val = boto.utils.get_utf8_value(params[key])
- pairs.append(urllib.quote(key, safe='') + '=' +
- urllib.quote(val, safe='-_~'))
- qs = '&'.join(pairs)
- boto.log.debug('query string: %s' % qs)
- string_to_sign += qs
- boto.log.debug('string_to_sign: %s' % string_to_sign)
- hmac.update(string_to_sign)
- b64 = base64.b64encode(hmac.digest())
- boto.log.debug('len(b64)=%d' % len(b64))
- boto.log.debug('base64 encoded digest: %s' % b64)
- return (qs, b64)
-
-
-def get_auth_handler(host, config, provider, requested_capability=None):
- """Finds an AuthHandler that is ready to authenticate.
-
- Lists through all the registered AuthHandlers to find one that is willing
- to handle for the requested capabilities, config and provider.
-
- :type host: string
- :param host: The name of the host
-
- :type config:
- :param config:
-
- :type provider:
- :param provider:
-
- Returns:
- An implementation of AuthHandler.
-
- Raises:
- boto.exception.NoAuthHandlerFound:
- boto.exception.TooManyAuthHandlerReadyToAuthenticate:
- """
- ready_handlers = []
- auth_handlers = boto.plugin.get_plugin(AuthHandler, requested_capability)
- total_handlers = len(auth_handlers)
- for handler in auth_handlers:
- try:
- ready_handlers.append(handler(host, config, provider))
- except boto.auth_handler.NotReadyToAuthenticate:
- pass
-
- if not ready_handlers:
- checked_handlers = auth_handlers
- names = [handler.__name__ for handler in checked_handlers]
- raise boto.exception.NoAuthHandlerFound(
- 'No handler was ready to authenticate. %d handlers were checked.'
- ' %s '
- 'Check your credentials' % (len(names), str(names)))
-
- if len(ready_handlers) > 1:
- # NOTE: Even though it would be nice to accept more than one handler
- # by using one of the many ready handlers, we are never sure that each
- # of them are referring to the same storage account. Since we cannot
- # easily guarantee that, it is always safe to fail, rather than operate
- # on the wrong account.
- names = [handler.__class__.__name__ for handler in ready_handlers]
- raise boto.exception.TooManyAuthHandlerReadyToAuthenticate(
- '%d AuthHandlers ready to authenticate, '
- 'only 1 expected: %s' % (len(names), str(names)))
-
- return ready_handlers[0]
« no previous file with comments | « third_party/gsutil/20110627/boto/boto/__init__.py ('k') | third_party/gsutil/20110627/boto/boto/auth_handler.py » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698