3
,[; @ s d Z ddlmZmZ ddlZddlZddlZejeZ ddl
Z
y ddl Z W n e k
rh ddl
jZ Y nX e
jd dkr~eZneZddlmZmZmZ ddlmZmZ ddlmZmZ d Z d
Z d Z e e e fZ d Z d
Z!dZ"dZ#G dd de$Z%dS )z
oauthlib.oauth1.rfc5849
~~~~~~~~~~~~~~
This module is an implementation of various logic needed
for signing and checking OAuth 1.0 RFC 5849 requests.
)absolute_importunicode_literalsN )Request urlencodegenerate_nonce)generate_timestamp
to_unicode )
parameters signaturez HMAC-SHA1zRSA-SHA1Z PLAINTEXTZ AUTH_HEADERZQUERYZBODYz!application/x-www-form-urlencodedc
@ s e Zd ZdZeejeeje ej
iZ e dd Z
ddddeedddddddf
ddZdd Zd
d Zd d
ZdddZdddZdS )Clientz2A client used to sign OAuth 1.0 RFC 5849 requests.c C s || j |< d S )N)SIGNATURE_METHODS)clsZ method_nameZmethod_callback r /usr/lib/python3.6/__init__.pyregister_signature_method3 s z Client.register_signature_methodNzutf-8c s fdd}||| _ ||| _||| _||| _||| _||| _||| _||| _|| | _||
| _ | | _
|| | _ ||
| _ ||| _
dS )a Create an OAuth 1 client.
:param client_key: Client key (consumer key), mandatory.
:param resource_owner_key: Resource owner key (oauth token).
:param resource_owner_secret: Resource owner secret (oauth token secret).
:param callback_uri: Callback used when obtaining request token.
:param signature_method: SIGNATURE_HMAC, SIGNATURE_RSA or SIGNATURE_PLAINTEXT.
:param signature_type: SIGNATURE_TYPE_AUTH_HEADER (default),
SIGNATURE_TYPE_QUERY or SIGNATURE_TYPE_BODY
depending on where you want to embed the oauth
credentials.
:param rsa_key: RSA key used with SIGNATURE_RSA.
:param verifier: Verifier used when obtaining an access token.
:param realm: Realm (scope) to which access is being requested.
:param encoding: If you provide non-unicode input you may use this
to have oauthlib automatically convert.
:param decoding: If you wish that the returned uri, headers and body
from sign be encoded back from unicode, then set
decoding to your preferred encoding, i.e. utf-8.
:param nonce: Use this nonce instead of generating one. (Mainly for testing)
:param timestamp: Use this timestamp instead of using current. (Mainly for testing)
c s rt | S | S )N)r )x)encodingr r X s z!Client.__init__..N)
client_key
client_secretresource_owner_keyresource_owner_secretsignature_methodsignature_type callback_urirsa_keyverifierrealmr decodingnonce timestamp)selfr r r r r r r r r r r r r! r" encoder )r r __init__7 s !
zClient.__init__c C sp t | j }|d rdnd |d< |d r,dnd |d< |d r@dnd |d< djdd |j D }d| jj|f S ) Nr z****r r z, c s s | ]\}}d ||f V qdS )z%s=%sNr ).0kvr r r o s z"Client.__repr__..z<%s %s>)varscopyjoinitems __class____name__)r# attrsZ
attribute_strr r r __repr__i s zClient.__repr__c
C s | j tkrtj| j| jS | j|\}}}tjtj|j ||d}t
j dj | tj
|}tj||jdd}t
j dj | t
j dj | tj|j||}t
j dj | | j | jkrtd| j| j || } t
j d j | | S )
aw Get an OAuth signature to be used in signing a request
To satisfy `section 3.4.1.2`_ item 2, if the request argument's
headers dict attribute contains a Host item, its value will
replace any netloc part of the request argument's uri attribute
value.
.. _`section 3.4.1.2`: https://tools.ietf.org/html/rfc5849#section-3.4.1.2
)Z uri_querybodyheaderszCollected params: {0}ZHostNzNormalized params: {0}zNormalized URI: {0}z#Signing: signature base string: {0}zInvalid signature method.zSignature: {0})r SIGNATURE_PLAINTEXTr Zsign_plaintextr r _renderZcollect_parametersurlparseZquerylogdebugformatZnormalize_parametersZnormalize_base_string_urigetZconstruct_base_string http_methodr
ValueError)
r# requesturir3 r2 Zcollected_paramsZnormalized_paramsZnormalized_uriZ base_stringZsigr r r get_oauth_signaturer s,
zClient.get_oauth_signaturec C s | j dkrt n| j }| jdkr&t n| j}d|fd|fdd| jfd| jfg}| jrd|jd| jf | jrz|jd | jf | j r|jd
| j f |j
j d d}|o|j d d
k }|j
dk r|r|jdtjtj|j
jdj jdf |S )zMGet the basic OAuth parameters to be used in generating a signature.
NZ oauth_nonceZoauth_timestamp
oauth_version1.0Zoauth_signature_methodZoauth_consumer_keyZ oauth_tokenZoauth_callbackZoauth_verifierz Content-Typez!application/x-www-form-urlencodedr Zoauth_body_hashzutf-8)r@ rA )r! r r" r r r r appendr r r3 r: findr2 base64Z b64encodehashlibZsha1r$ Zdigestdecode)r# r= r! r" Zparams content_typeZcontent_type_eligibler r r get_oauth_params s$ ,zClient.get_oauth_paramsFc C s |j |j|j }}}| jtkr6tj|j|j|d}n^| jtkrp|j dk rptj
|j|j }|rft |}d|d< n$| jt krtj
|j|j }ntd|||fS )a Render a signed request according to signature type
Returns a 3-tuple containing the request URI, headers, and body.
If the formencode argument is True and the body contains parameters, it
is escaped and returned as a valid formencoded string.
)r Nz!application/x-www-form-urlencodedz Content-Typez!Unknown signature type specified.)r> r3 r2 r SIGNATURE_TYPE_AUTH_HEADERr Zprepare_headers oauth_paramsSIGNATURE_TYPE_BODY decoded_bodyZprepare_form_encoded_bodyr SIGNATURE_TYPE_QUERYZprepare_request_uri_queryr< )r# r=
formencoder r> r3 r2 r r r r5 s
zClient._renderGETc C s| t ||||| jd}|jjdd}|o.|jd}|tk} |jdk }
|rT|
rTtdnp| rh|
rhtdn\| r|
rtdj|p~dtn<| j t
kr| o|
o| rtd n|j dkr|
rtd | j ||_
|j
jd
| j|f | j|d|p| jd\}}}| jrrtjd| j |j| j}|r6|j| jn|}i } x.|j D ]"\} }
|
j| j| | j| j< qHW | }|||fS )aF Sign a request
Signs an HTTP request with the specified parts.
Returns a 3-tuple of the signed request's URI, headers, and body.
Note that http_method is not returned as it is unaffected by the OAuth
signing process. Also worth noting is that duplicate parameters
will be included in the signature, regardless of where they are
specified (query, body).
The body argument may be a dict, a list of 2-tuples, or a formencoded
string. The Content-Type header must be 'application/x-www-form-urlencoded'
if it is present.
If the body argument is not one of the above, it will be returned
verbatim as it is unaffected by the OAuth signing process. Attempting to
sign a request with non-formencoded data using the OAuth body signature
type is invalid and will raise an exception.
If the body does contain parameters, it will be returned as a properly-
formatted formencoded string.
Body may not be included if the http_method is either GET or HEAD as
this changes the semantic meaning of the request.
All string data MUST be unicode or be encoded with the same encoding
scheme supplied to the Client constructor, default utf-8. This includes
strings inside body dicts, for example.
)r z Content-TypeNz
multipart/z?Headers indicate a multipart body but body contains parameters.z?Headers indicate a formencoded body but body was not decodable.zGBody contains parameters but Content-Type header was {0} instead of {1}znot setz=Body signatures may only be used with form-urlencoded contentrO HEADz*GET/HEAD requests should not include body.Zoauth_signatureT)rN r z%Encoding URI, headers and body to %s.)rO rP )r r r3 r:
startswith CONTENT_TYPE_FORM_URLENCODEDrL r< r9 r rK upperrH rJ rB r? r5 r r r7 r8 r$ r- )r# r> r; r2 r3 r r= rG Z multipartZshould_have_paramsZ
has_paramsZ new_headersr' r( r r r sign sJ
z Client.sign)FN)rO NNN)r/
__module__ __qualname____doc__SIGNATURE_HMACr Zsign_hmac_sha1_with_client
SIGNATURE_RSAZsign_rsa_sha1_with_clientr4 Zsign_plaintext_with_clientr classmethodr rI r% r1 r? rH r5 rT r r r r r
* s&
) *!
%r
)&rW Z
__future__r r rD rE ZloggingZ getLoggerr/ r7 sysr6 ImportErrorZ urllib.parseparse version_infobytesZ
bytes_typestrZoauthlib.commonr r r r r r r rX rY r4 r rI rM rK rR objectr
r r r r s2