3
,[s( @ sl d Z ddlmZmZ ddlZddlmZmZ ddlm Z m
Z
m Z m Z m
Z
mZmZmZmZ G dd deZdS ) z
oauthlib.oauth1.rfc5849.endpoints.base
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This module is an implementation of various logic needed
for signing and checking OAuth 1.0 RFC 5849 requests.
)absolute_importunicode_literalsN)Requestgenerate_token ) CONTENT_TYPE_FORM_URLENCODEDSIGNATURE_HMAC
SIGNATURE_RSASIGNATURE_TYPE_AUTH_HEADERSIGNATURE_TYPE_BODYSIGNATURE_TYPE_QUERYerrors signatureutilsc @ s@ e Zd ZdddZdd Zdd Zdd Zd
d Zdd
dZdS ) BaseEndpointNc C s || _ |p t| _d S )N)request_validatorr token_generator)selfr r r /usr/lib/python3.6/base.py__init__ s zBaseEndpoint.__init__c
C s t j|jddd}t j|jdd}t j|jdd}g }|j| |j| |j| ttdd t|t j
|ft |t j
|ft |t j
|ff}t
|dkrd d
|D }tjd d j|fd
y|d \}}} W n tk
r tjdd
Y nX ||| fS )zExtracts parameters from query, headers and body. Signature type
is set to the source in which parameters were found.
FT)headersexclude_oauth_signatureZ
with_realm)bodyr ) uri_queryr c S s | d S )Nr r )sr r r + s z=BaseEndpoint._get_signature_type_and_params.. c S s g | ] }|d qS )r r ).0r r r r
5 s z?BaseEndpoint._get_signature_type_and_params..zFoauth_ params must come from only 1 signaturetype but were found in %sz, ) descriptionr z#Missing mandatory OAuth parameters.)r Zcollect_parametersr r r extendlistfilterr
r Zfilter_oauth_paramsr r lenr
InvalidRequestErrorjoin
IndexError)
r requestZ
header_paramsZ body_paramsZ query_paramsparamsZ!signature_types_with_oauth_paramsZ found_typessignature_type oauth_paramsr r r _get_signature_type_and_params s:
z+BaseEndpoint._get_signature_type_and_paramsc C s" |pi }d|kr,t |d kr,t||||}nt||d|}| j|\}}}tt|t|krjtjddt|}|jd|_|jd|_ |jd|_
|jd|_ |jd |_ |jd
|_
|jd |_|jd |_t|jd
|_||_dd |D |_d
|jjddkr dd |jD |_|S )Nz Content-Type zDuplicate OAuth1 entries.)r oauth_signatureZoauth_consumer_keyZ oauth_tokenZ oauth_nonceZoauth_timestampZoauth_callbackZoauth_verifierZoauth_signature_methodrealmc S s g | ]\}}|d kr||fqS )r. r )r kvr r r r d s z0BaseEndpoint._create_request..Z
Authorizationc S s g | ]\}}|d kr||fqS )r/ r )r r0 r1 r r r r g s )r r r, r$ dictr
r% getr
client_keyresource_owner_keynonce timestampZ redirect_uriZverifiersignature_methodr/ r+ r) r ) r uriZ http_methodr r r( r* r) r+ r r r _create_requestD s2 z BaseEndpoint._create_requestc C s& | j jr"|jj jd r"tj d S )Nzhttps://)r Z enforce_sslr9 lower
startswithr
ZInsecureTransportError)r r( r r r _check_transport_securityl s z&BaseEndpoint._check_transport_securityc C s& t |j|j|j|j|jfs(tjdd|j| jj krPtj
d|j| jj f dd|j krt|j d dkrttjddt |jdkrtjddyt
|j}W n tk
r tjd dY n.X ttj | | jjkrtjd
| jj d| jj|jstjd d| jj|js"tjd dd S )
Nz#Missing mandatory OAuth parameters.)r z Invalid signature, %s not in %r.Z
oauth_versionz1.0zInvalid OAuth version.
zInvalid timestamp sizez Timestamp must be an integer.zCTimestamp given is invalid, differ from allowed by over %s seconds.zInvalid client key format.zInvalid nonce format.)allr r4 r6 r7 r8 r
r% r Zallowed_signature_methodsZInvalidSignatureMethodErrorr+ r$ int
ValueErrorabstimeZtimestamp_lifetimeZcheck_client_keyZ check_nonce)r r( Ztsr r r _check_mandatory_parametersr sB
z(BaseEndpoint._check_mandatory_parametersFc C s |j tkr(| jj|j|}tj||}np| jj|j|}d }|jrp|r\| jj |j|j|}n| jj
|j|j|}|j t krtj |||}ntj
|||}|S )N)r8 r r Z get_rsa_keyr4 r Zverify_rsa_sha1Zget_client_secretr5 Zget_request_token_secretZget_access_token_secretr Zverify_hmac_sha1Zverify_plaintext)r r( Zis_token_requestZrsa_keyZvalid_signatureZ
client_secretZresource_owner_secretr r r _check_signature s&
z BaseEndpoint._check_signature)N)F) __name__
__module__ __qualname__r r, r: r= rD rE r r r r r s
*(Br )__doc__Z
__future__r r rC Zoauthlib.commonr r r- r r r r
r r r
r r objectr r r r r s
,