U n/e6@sddlZddlZddlZddlmZddlmZmZmZm Z m Z m Z m Z ddl mZGdddeZddZdd d ZGd d d eZd dZdddZddZdddZdS)N)UnknownClientMethodError) RequestSignerS3PostPresignerUnknownSignatureVersionError UnsupportedSignatureVersionError_should_use_global_endpointcreate_request_objectprepare_request_dict) ArnParserc@s@eZdZdddZdddZddZdd d ZeZdd d ZdS)AioRequestSignerNcs|||IdHS)N)sign)selfoperation_namerequestkwargsr7/tmp/pip-unpacked-wheel-8mnez3y6/aiobotocore/signers.pyhandlerszAioRequestSigner.handlerstandardc s0|}|dkr|j}|dkr |j}||||jIdH}|jjd|j||||j|||dIdH|t j kr,|||d} |dk r|| d<|j di} |s| dr| d| d<| dr| d| d<z|j f| IdH} Wn>t k r } z|d kr t|d n| W5d} ~ XYnX| |dS) Nzbefore-sign.{}.{})r signing_name region_namesignature_versionrequest_signerr)rrrexpiressigningregionrrrr) _region_name _signing_name_choose_signercontext_event_emitteremitformat _service_id hyphenizebotocoreUNSIGNEDgetget_auth_instancerrZadd_auth) r rrr signing_type expires_inrZexplicit_region_namerrZsigning_contextautherrrr sV       zAioRequestSigner.signc sddd}||d}|dp$|j}|di}|d|j}|d|j} |tjk rj||sj||7}|jjd |j ||| ||d IdH\} } | dk r| }|tjk r||s||7}|S) Nz -presign-postz-query) presign-post presign-urlZ auth_typerrrzchoose-signer.{}.{})rrrr ) r(_signature_versionrrr&r'endswithr!Zemit_until_responser#r$r%) r rr*r Zsigning_type_suffix_mapsuffixrrrrrresponserrrrTs>   zAioRequestSigner._choose_signerc s|dkr|j}tjj|}|dkr.t|d|jdkrbd}|jdk rV|jIdH}||}|Sd}|j dk r|j IdH}||d<|j r|j dkrtj ||d<||d<|f|}|S)NrT credentialsrZ service_name)r1r&r,ZAUTH_TYPE_MAPSr(rZREQUIRES_TOKENZ _auth_tokenZget_frozen_tokenZ _credentialsZget_frozen_credentialsZREQUIRES_REGIONr exceptionsZ NoRegionError) r rrrrclsZ frozen_tokenr,Zfrozen_credentialsrrrr)}s2      z"AioRequestSigner.get_auth_instancecs0t|}||||d||IdH||jS)Nr/)rr prepareurl)r request_dictrr+rrrrrrgenerate_presigned_urls z'AioRequestSigner.generate_presigned_url)NN)NrNN)N)r8NN) __name__ __module__ __qualname__rr rr)Zget_authr<rrrrr s  :* "r cKs t|d<dS)Ngenerate_db_auth_token)r@Zclass_attributesrrrradd_generate_db_auth_tokensrBc sz|}|dkr|jj}d|d}ddi|dd}d}||d |} t|| |jjd||d d d IdH} | t|dS) aGenerates an auth token used to connect to a db with IAM credentials. :type DBHostname: str :param DBHostname: The hostname of the database to connect to. :type Port: int :param Port: The port number the database is listening on. :type DBUsername: str :param DBUsername: The username to log in as. :type Region: str :param Region: The region the database is in. If None, the client region will be used. :return: A presigned url which can be used as an auth token. Nconnect)ActionZDBUser/r0GET)Zurl_pathZ query_stringheadersbodymethodzhttps://:izrds-db)rr;rr+r)metarr _request_signerr<len) r Z DBHostnameZPortZ DBUsernameZRegionrparamsr;scheme endpoint_urlZ presigned_urlrrrr@s.  r@c@seZdZdddZdS)AioS3PostPresignerNr8c s|dkr i}|dkrg}i}tj}|tj|d}|tjj|d<g|d<|D]} |d| qTt|} || j d<|| j d<|j d| |dIdH| j |dS) N)secondsZ expiration conditionszs3-presign-post-fieldszs3-presign-post-policyZ PutObjectr.)r:fields) datetimeutcnow timedeltastrftimer&r,ZISO8601appendrr rLr r:) r r;rTrSr+rpolicyZ datetime_nowZ expire_date conditionrrrrgenerate_presigned_posts*    z*AioS3PostPresigner.generate_presigned_post)NNr8N)r=r>r?r\rrrrrQs rQcKs t|d<dS)Nr<)r<rArrradd_generate_presigned_urlsr]r8cs|}|}|dkri}|}|}dt|d} |j} z|j|} Wntk r\t|dYnX|jj| } |j|| | dIdH}t | dd} |j | || | dIdH\}}|j || || |d d IdH}|dk r||d <| j||| d IdHS) axGenerate a presigned url given a client, its method, and arguments :type ClientMethod: string :param ClientMethod: The client method to presign for :type Params: dict :param Params: The parameters normally passed to ``ClientMethod``. :type ExpiresIn: int :param ExpiresIn: The number of seconds the presigned url is valid for. By default it expires in an hour (3600 seconds) :type HttpMethod: string :param HttpMethod: The http method to use on the generated url. By default, the http method is whatever is used in the method's model. :returns: The presigned url NTZis_presign_requestZuse_global_endpoint) method_name api_paramsoperation_modelr Bucketr0Zignore_signing_regionFrarbrPr rGZset_user_agent_headerrI)r;r+r)rrLZ_PY_TO_OP_NAMEKeyErrorrrK service_modelrb_emit_api_paramsr is_arnr(_resolve_endpoint_ruleset_convert_to_request_dictr<)r Z ClientMethodZParams ExpiresInZ HttpMethodZ client_methodrNr+Z http_methodr rrrb bucket_is_arnrPadditional_headersr;rrrr<sT  r<cKs t|d<dS)Nr\)r\rArrradd_generate_presigned_postjsrocs(|}|}|}|} |} |dkr"i}n|}| dkr6g} dt|d} t|j} |jjd} |jd|i| | dIdH}t | dd}|j | || | dIdH\}}|j || || |dd IdH}| d |i|d r| d d |dtd  gn| d|i||d<| j||| | dIdHS)NTr^Z CreateBucketrcr`r0rdFrebucketz ${filename}z starts-withz$keykey)r;rTrSr+)copyrrQrLrKrgrbrhr rir(rjrkrYr2rMr\)r rcZKeyZFieldsZ ConditionsrlrprqrTrSr+r Zpost_presignerrbrNrmrPrnr;rrrr\ns\     r\)N)Nr8N)NNr8)rUr&Z botocore.authZbotocore.exceptionsrZbotocore.signersrrrrrrr Zbotocore.utilsr r rBr@rQr]r<ror\rrrrs* $ & 8( K