o diG@sddlZddlZddlZddlmZddlmZmZddlm Z m Z m Z m Z m Z mZmZddlmZddlmZGddde Zd d Zd d Z d!d dZ d"ddZ d"ddZ d"ddZGddde ZddZ d#ddZddZ d$dd ZdS)%N)get_current_datetime)ParamValidationErrorUnknownClientMethodError) RequestSignerS3PostPresignerUnknownSignatureVersionError UnsupportedSignatureVersionError_should_use_global_endpointcreate_request_objectprepare_request_dict)FrozenAuthToken) ArnParserc@sReZdZdddZ    dddZddZ  dd d ZeZ  dd d ZdS)AioRequestSignerNcs|||IdHSN)sign)selfoperation_namerequestkwargsrG/home/ubuntu/.local/lib/python3.10/site-packages/aiobotocore/signers.pyhandlerszAioRequestSigner.handlerstandardc sf|}|dur |j}|dur|j}||||jIdH}|jjd|jd||||j|||dIdH|tj kr|||d} |durI|| d<|j di} |s]| dr]| d| d<| d rh| d | d <| d rs| d | d <| d dur| | | d | d z |j di| IdH} Wnt y} z |d krt|d| d} ~ ww| |dSdS)Nz before-sign..)r signing_name region_namesignature_versionrequest_signerr)rrrexpiressigningregionrrrequest_credentialsidentity_cache cache_keyrrr) _region_name _signing_name_choose_signercontext_event_emitteremit _service_id hyphenizebotocoreUNSIGNEDget_resolve_identity_cacheget_auth_instancerradd_auth) rrrr signing_type expires_inrexplicit_region_namerrsigning_contextautherrrrsh       zAioRequestSigner.signc sddd}||d}|dp|j}|di}|d|j}|d|j} |tjur6||s6||7}|jjd |j d ||| ||d IdH\} } | durc| }|tjurc||sc||7}|S) Nz -presign-postz-query) presign-post presign-url auth_typerrr zchoose-signer.r)rrrr() r/_signature_versionr&r%r-r.endswithr)emit_until_responser+r,) rrr3r(signing_type_suffix_mapsuffixrrrrrresponserrrr'^s6    zAioRequestSigner._choose_signerc s|dur|j}tjj|}|durt|d|jdur8|jr/t|jt s/|j IdH}n|j}||}|S|p<|j } t |dddurX|d} |d} | | IdH} |d=d} | dure| IdH} | |d<|jr~|jdurvtj||d<||d<|d i|}|S) Nr$TREQUIRES_IDENTITY_CACHEr"r# credentialsr service_namer)r=r-r7AUTH_TYPE_MAPSr/rREQUIRES_TOKEN _auth_token isinstancer get_frozen_token _credentialsgetattrget_credentialsget_frozen_credentialsREQUIRES_REGIONr% exceptions NoRegionError) rrrrr!rcls frozen_tokenr7rDcachekeyfrozen_credentialsrrrr1sB    z"AioRequestSigner.get_auth_instancecs2t|}||||d||IdH||jS)Nr:)r rprepareurl)r request_dictrr4rrrrrrgenerate_presigned_urls  z'AioRequestSigner.generate_presigned_url)NN)NrNN)rWNN) __name__ __module__ __qualname__rrr'r1get_authr[rrrrrs    B+ /rcK t|d<dS)Ngenerate_db_auth_token)raclass_attributesrrrradd_generate_db_auth_token rdcKst|d<t|d<dS)Ngenerate_db_connect_auth_token$generate_db_connect_admin_auth_token)#dsql_generate_db_connect_auth_token)dsql_generate_db_connect_admin_auth_tokenrbrrr'add_dsql_generate_db_auth_token_methodss rjc s||}|dur |jj}d|d}ddi|dd}d}||d |} t|| |jjd||d d d IdH} | t|dS) aGenerates an auth token used to connect to a db with IAM credentials. :type DBHostname: str :param DBHostname: The hostname of the database to connect to. :type Port: int :param Port: The port number the database is listening on. :type DBUsername: str :param DBUsername: The username to log in as. :type Region: str :param Region: The region the database is in. If None, the client region will be used. :return: A presigned url which can be used as an auth token. Nconnect)ActionDBUser/r;GETurl_path query_stringheadersbodymethodhttps://:zrds-dbrrZrr4r)metarr _request_signerr[len) r DBHostnamePort DBUsernameRegionr paramsrZscheme endpoint_url presigned_urlrrrras0  rarxc sd}||vrtd|dd|d|dur|jj}ddid |id d }d }||}t|||jj||||d dIdH} | t|dS)a!Generate a DSQL database token for an arbitrary action. :type Hostname: str :param Hostname: The DSQL endpoint host name. :type Action: str :param Action: Action to perform on the cluster (DbConnectAdmin or DbConnect). :type Region: str :param Region: The AWS region where the DSQL Cluster is hosted. If None, the client region will be used. :type ExpiresIn: int :param ExpiresIn: The token expiry duration in seconds (default is 900 seconds). :return: A presigned url which can be used as an auth token. ) DbConnectDbConnectAdminz Received z! for action but expected one of: z, )reportNrnr;rlrorprvdsqlry)rjoinrzrr r{r[r|) rHostnamerlr ExpiresInpossible_actionsrZrrrrrr_dsql_generate_db_auth_tokens4   rct||d||IdHS)aGenerate a DSQL database token for the "DbConnect" action. :type Hostname: str :param Hostname: The DSQL endpoint host name. :type Region: str :param Region: The AWS region where the DSQL Cluster is hosted. If None, the client region will be used. :type ExpiresIn: int :param ExpiresIn: The token expiry duration in seconds (default is 900 seconds). :return: A presigned url which can be used as an auth token. rNrrrrrrrrrh?  rhcr)aGenerate a DSQL database token for the "DbConnectAdmin" action. :type Hostname: str :param Hostname: The DSQL endpoint host name. :type Region: str :param Region: The AWS region where the DSQL Cluster is hosted. If None, the client region will be used. :type ExpiresIn: int :param ExpiresIn: The token expiry duration in seconds (default is 900 seconds). :return: A presigned url which can be used as an auth token. rNrrrrrriPrric@seZdZ    dddZdS)AioS3PostPresignerNrWc s|duri}|dur g}i}t}|tj|d}|tjj|d<g|d<|D] } |d| q)t|} || j d<|| j d<|j d| |dIdH| j |dS) N)seconds expiration conditionszs3-presign-post-fieldszs3-presign-post-policy PutObjectr9)rYfields) rdatetime timedeltastrftimer-r7ISO8601appendr r(r{rrY) rrZrrr4rpolicy datetime_now expire_date conditionrrrrgenerate_presigned_postbs&   z*AioS3PostPresigner.generate_presigned_post)NNrWN)r\r]r^rrrrrras rcKr`)Nr[)r[rbrrradd_generate_presigned_urlrerrWcs|}|}|dur i}|}|}dt|d} |j} z|j|} Wn ty,t|dw|jj| } |j|| | dIdH}t | dd} |j | || | dIdH\}}}|j || || |d d IdH}|durn||d <| j||| d IdHS) axGenerate a presigned url given a client, its method, and arguments :type ClientMethod: string :param ClientMethod: The client method to presign for :type Params: dict :param Params: The parameters normally passed to ``ClientMethod``. :type ExpiresIn: int :param ExpiresIn: The number of seconds the presigned url is valid for. By default it expires in an hour (3600 seconds) :type HttpMethod: string :param HttpMethod: The http method to use on the generated url. By default, the http method is whatever is used in the method's model. :returns: The presigned url NTis_presign_requestuse_global_endpoint) method_name api_paramsoperation_modelr(Bucketr;ignore_signing_regionFrrrr(rsset_user_agent_headerru)rZr4r)r r{_PY_TO_OP_NAMEKeyErrorrrz service_modelr_emit_api_paramsr is_arnr/_resolve_endpoint_ruleset_convert_to_request_dictr[)r ClientMethodParamsr HttpMethod client_methodrr4 http_methodr(rrr bucket_is_arnradditional_headers propertiesrZrrrr[s`       r[cKr`)Nr)rrbrrradd_generate_presigned_postrercs,|}|}|}|} |} |duri}n|}| durg} dt|d} t|j} |jjd} |jd|i| | dIdH}t | dd}|j | || | dIdH\}}}|j || || |dd IdH}| d |i|d r| d d |dtd  gn| d|i||d<| j||| | dIdHS)NTr CreateBucketrrr;rFrbucketz ${filename}z starts-withz$keyrU)rZrrr4)copyr rr{rzrrrr rr/rrrr>r|r)rrKeyFields ConditionsrrrUrrr4r(post_presignerrrrrrrrZrrrrsf       rr)Nrx)NrWN)NNrW) rr- botocore.authbotocore.compatrbotocore.exceptionsrrbotocore.signersrrrrr r r botocore.tokensr botocore.utilsr rrdrjrarrhrirrr[rrrrrrs6 $ 9 9 /  ( O