o Á¿i—!ã@sBddlZddlmZmZddlmZmZmZdZGdd„dƒZ dS)éN)Ú LengthReaderÚBody)ÚInvalidUWSGIHeaderÚUnsupportedModifierÚForbiddenUWSGIRequestièc@sZeZdZdZddd„Zdd„Zdd„Zd d „Zd d „Zd d„Z dd„Z dd„Z dd„Z dS)Ú UWSGIRequestaùuWSGI protocol request parser. The uWSGI protocol uses a 4-byte binary header: - Byte 0: modifier1 (packet type, 0 = WSGI request) - Bytes 1-2: datasize (16-bit little-endian, size of vars block) - Byte 3: modifier2 (additional flags, typically 0) After the header: 1. Vars block (datasize bytes): Key-value pairs containing WSGI environ - Each pair: 2-byte key_size (LE) + key + 2-byte val_size (LE) + value 2. Request body (determined by CONTENT_LENGTH in vars) écCs´||_||_||_||_||_d|_d|_d|_d|_d|_ d|_ g|_ g|_ d|_ |jr/dnd|_d|_i|_d|_d|_d|_d|_| ¡| |j¡}|j |¡| ¡dS)NÚ)rrÚhttpsÚhttpFr)ÚcfgÚunreaderÚ peer_addrÚ remote_addrÚ req_numberÚmethodÚuriÚpathÚqueryÚfragmentÚversionÚheadersÚtrailersÚbodyÚis_sslÚschemeÚ must_closeÚ uwsgi_varsÚ modifier1Ú modifier2Úproxy_protocol_infoÚ_expected_100_continueÚ_check_allowed_ipÚparseÚunreadÚset_body_reader)Úselfr r rrÚunused©r(úJ/home/ubuntu/.local/lib/python3.10/site-packages/gunicorn/uwsgi/message.pyÚ__init__!s2   zUWSGIRequest.__init__cCsNt|jdddgƒ}t|jtƒsdSd|vrdS|jd|vr%t|jdƒ‚dS)z(Verify source IP is in the allowed list.Úuwsgi_allow_ipsz 127.0.0.1z::1NÚ*r)Úgetattrr Ú isinstancerÚtupler)r&Ú allow_ipsr(r(r)r"Hs ÿzUWSGIRequest._check_allowed_ipcCs d|_dS)z1Force the connection to close after this request.TN)r)r&r(r(r)Ú force_closeWs zUWSGIRequest.force_closecCsš| |d¡}t|ƒdkrtdƒ‚|d|_t |dd…d¡}|d|_|jdkr.t|jƒ‚|dkrG| ||¡}t|ƒ|krBtdƒ‚| |¡|  ¡dS) z)Parse uWSGI packet header and vars block.ézincomplete headerrréÚlittlezincomplete vars blockó) Ú _read_exactÚlenrrÚintÚ from_bytesrrÚ _parse_varsÚ_extract_request_info)r&r ÚheaderÚdatasizeÚ vars_datar(r(r)r#[s         zUWSGIRequest.parsecCsvt ¡}|}|dkr | ¡}|sn| |¡|| ¡}|dks | ¡}t|ƒ|kr9| ||d…¡|d|…}|S)z*Read exactly size bytes from the unreader.rN)ÚioÚBytesIOÚreadÚwriteÚtellÚgetvaluer7r$)r&r ÚsizeÚbufÚ remainingÚdataÚresultr(r(r)r6vs  û  zUWSGIRequest._read_exactcCs&d}d}|t|ƒkr‘|tkrtdƒ‚|dt|ƒkrtdƒ‚t |||d…d¡}|d7}||t|ƒkr:tdƒ‚||||… d¡}||7}|dt|ƒkrUtdƒ‚t |||d…d¡}|d7}||t|ƒkrqtd ƒ‚||||… d¡}||7}||j|<|d 7}|t|ƒks d Sd S) z‚Parse uWSGI vars block into key-value pairs. Format: key_size (2 bytes LE) + key + val_size (2 bytes LE) + value rztoo many variableséztruncated key sizer4z truncated keyzlatin-1ztruncated value sizeztruncated valuerN)r7ÚMAX_UWSGI_VARSrr8r9Údecoder)r&rHÚposÚ var_countÚkey_sizeÚkeyÚval_sizeÚvaluer(r(r)r:Šs0  ãzUWSGIRequest._parse_varscCs|j dd¡|_|j dd¡|_|j dd¡|_|jr%d|j|jf|_n|j|_|j dd¡ ¡d vr8d |_n d |jvrC|jd |_|j ¡D]5\}}|  d ¡rd|d d…  dd¡}|j   ||f¡qH|dkrq|j   d|f¡qH|dkr}|j   d|f¡qHdS)aExtract HTTP request info from uWSGI vars. Header Mapping (CGI/WSGI to HTTP): The uWSGI protocol passes HTTP headers using CGI-style environment variable naming. This method converts them back to HTTP header format: - HTTP_* vars: Strip 'HTTP_' prefix, replace '_' with '-' Example: HTTP_X_FORWARDED_FOR -> X-FORWARDED-FOR Example: HTTP_ACCEPT_ENCODING -> ACCEPT-ENCODING - CONTENT_TYPE: Mapped directly to CONTENT-TYPE header (CGI spec excludes HTTP_ prefix for this header) - CONTENT_LENGTH: Mapped directly to CONTENT-LENGTH header (CGI spec excludes HTTP_ prefix for this header) Note: The underscore-to-hyphen conversion is lossy. Headers that originally contained underscores (e.g., X_Custom_Header) cannot be distinguished from hyphenated headers (X-Custom-Header) after passing through nginx/uWSGI. This is a CGI/WSGI specification limitation, not specific to this implementation. ÚREQUEST_METHODÚGETÚ PATH_INFOú/Ú QUERY_STRINGr z%s?%sÚHTTPS)ÚonÚ1Útruer zwsgi.url_schemeÚHTTP_éNÚ_ú-Ú CONTENT_TYPEz CONTENT-TYPEÚCONTENT_LENGTHzCONTENT-LENGTH) rÚgetrrrrÚlowerrÚitemsÚ startswithÚreplacerÚappend)r&rPrRÚ header_namer(r(r)r;±s(   €øz"UWSGIRequest._extract_request_infocCsTd}d|jvrz tt|jdƒdƒ}Wn tyd}Ynwtt|j|ƒƒ|_dS)z/Set up the body reader based on CONTENT_LENGTH.rraN)rÚmaxr8Ú ValueErrorrrr r)r&Úcontent_lengthr(r(r)r%ès  ÿzUWSGIRequest.set_body_readercCs8|jrdS|j dd¡ ¡}|dkrdS|dkrdSdS)z@Determine if the connection should be closed after this request.TÚHTTP_CONNECTIONr Úclosez keep-aliveF)rrrbrc)r&Ú connectionr(r(r)Ú should_closeõszUWSGIRequest.should_closeN)r) Ú__name__Ú __module__Ú __qualname__Ú__doc__r*r"r1r#r6r:r;r%ror(r(r(r)rs ''7 r) r?Úgunicorn.http.bodyrrÚgunicorn.uwsgi.errorsrrrrKrr(r(r(r)Ús