o i+F@sddlmZddlmZddlmZddlmZddlTddlmZm Z m Z ddl m Z ddlm Z d d lZd d lZeeZGd d d eZd S) )http) exceptions)Bucket)_make_range_string)*) to_stringurlsplitparse_qs)BaseCryptoProvider ClientErrorNcseZdZdZ         d$fdd Zdd Z  d%fd d Zd%d d Z   d&ddZ     d'ddZ   d&ddZ d(ddZ  d%ddZ d&fdd Z d&fdd Zd(fdd Zd(fdd Z d(d d!Zd"d#ZZS)) CryptoBucketu用于加密Bucket和Object操作的类，诸如上传、下载Object等。创建、删除bucket的操作需使用Bucket类接口。 用法（假设Bucket属于杭州区域） :: >>> import oss2 >>> auth = oss2.Auth('your-access-key-id', 'your-access-key-secret') >>> bucket = oss2.CryptoBucket(auth, 'http://oss-cn-hangzhou.aliyuncs.com', 'your-bucket', oss2.LocalRsaProvider()) >>> bucket.put_object('readme.txt', 'content of the object') :param auth: 包含了用户认证信息的Auth对象 :type auth: oss2.Auth :param str endpoint: 访问域名或者CNAME :param str bucket_name: Bucket名 :param crypto_provider: 客户端加密类。该参数默认为空 :type crypto_provider: oss2.crypto.BaseCryptoProvider :param bool is_cname: 如果endpoint是CNAME则设为True；反之，则为False。 :param session: 会话。如果是None表示新开会话，非None则复用传入的会话 :type session: oss2.Session :param float connect_timeout: 连接超时时间，以秒为单位。 :param str app_name: 应用名。该参数不为空，则在User Agent中加入其值。 注意到，最终这个字符串是要作为HTTP Header的值传输的，所以必须要遵循HTTP标准。 :param bool enable_crc: 如果开启crc校验则设为True；反之，则为False FNTcst|ts tdtd|tt|j|||||||| | | | | d ||_ i|_ t |_ |jrBtjd|jdt|_dStjdt|_dS)Nz9crypto_provider must be an instance of BaseCryptoProviderzInit CryptoBucket: {0})proxiesregion cloudbox_id is_path_style/) isinstancer r loggerdebugformatsuperr__init__crypto_providerupload_contexts threadingLockupload_contexts_lockapp_namer USER_AGENTOSS_ENCRYPTION_CLIENT user_agent)selfauthendpoint bucket_nameris_cnamesessionconnect_timeoutr enable_crcrrrr __class__F/home/ubuntu/.local/lib/python3.10/site-packages/oss2/crypto_bucket.pyr2s   zCryptoBucket.__init__cCs.d|vr |j|d<dS|ddt7<dS)Nz User-Agentr)r#r")r$headersr.r.r/_init_user_agentNszCryptoBucket._init_user_agentcsXtdt|}|||j}|j||j}| |}t t | ||||S)u\上传一个普通文件。 用法 :: >>> bucket.put_object('readme.txt', 'content of readme.txt') >>> with open(u'local_file.txt', 'rb') as f: >>> bucket.put_object('remote_file.txt', f) :param mat_desc: map，对象文件的description :param key: 上传到OSS的文件名 :param data: 待上传的内容。 :type data: bytes，str或file-like object :param headers: 用户指定的HTTP头部。可以指定Content-Type、Content-MD5、x-oss-meta-开头的头部等 :type headers: 可以是dict，建议是oss2.CaseInsensitiveDict :param progress_callback: 用户指定的进度回调函数。可以用来实现进度条等功能。参考 :ref:`progress_callback` 。 :return: :class:`PutObjectResult ` z#Start to put object to CryptoBucket) rrrCaseInsensitiveDictr1rcreate_content_materialmake_encrypt_adaptercipherto_object_metarr put_object)r$keydatar0progress_callbackcontent_crypto_materialr,r.r/r7Ts     zCryptoBucket.put_objectcCtd)u 使用加签的url上传对象 :param sign_url: 加签的url :param data: 待上传的数据 :param headers: 用户指定的HTTP头部。可以指定Content-Type、Content-MD5、x-oss-meta-开头的头部等，必须和签名时保持一致 :param progress_callback: 用户指定的进度回调函数。参考 :ref:`progress_callback` :return: 1The operation is not support for CryptoBucket nowr )r$sign_urlr9r0r:r.r.r/put_object_with_urlus z CryptoBucket.put_object_with_urlcCr<Nz-The operation is not support for CryptoBucketr )r$r8positionr9r0r:init_crcr.r.r/ append_objectzCryptoBucket.append_objectc Cs|rtdt|}||d}d}|r]|ddur$|dr$td|j|d|d\} } | | f} t| }|r?||d<|drS| d|dkrS|d| d}td || |td |j t |||||j d |j |||d } td | j | jt| ||j|j|d S)u\下载一个文件。 用法 :: >>> result = bucket.get_object('readme.txt') >>> print(result.read()) 'hello world' :param key: 文件名 :param byte_range: 指定下载范围。参见 :ref:`byte_range` :param headers: HTTP头部 :type headers: 可以是dict，建议是oss2.CaseInsensitiveDict :param progress_callback: 用户指定的进度回调函数。参考 :ref:`progress_callback` :param process: oss文件处理，如图像服务等。指定后process，返回的内容为处理后的文件。 :param params: http 请求的查询字符串参数 :type params: dict :return: file-like object :raises: 如果文件不存在，则抛出 :class:`NoSuchKey ` ；还可能抛出其他异常 9Process object operation is not support for Crypto Bucketr rNr:Don't support range get while start is none and end is notrangeQadjust range of get object, byte_range: {0}, adjust_byte_range: {1}, discard: {2}z[Start to get object from CryptoBucket: {0}, key: {1}, range: {2}, headers: {3}, params: {4}GET)r0paramsz.Get object done, req_id: {0}, status_code: {1}rdiscard)r rr2r1r adjust_rangerrrrr'r_do request_idstatusGetObjectResultr+) r$r8 byte_ranger0r:processrJrL range_stringstartendadjust_byte_rangerespr.r.r/ get_objects:  zCryptoBucket.get_objectc Cs tt|j}|rtj|vrtdt|}||d}d}|rg|ds.|dr.td|j |d|d\}} || f} t | }|rI||d<|dr]| d|dkr]|d| d}t d|| |t d|j||||jd ||d } t| ||j|j |d S) u1使用加签的url下载文件 :param sign_url: 加签的url :param byte_range: 指定下载范围。参见 :ref:`byte_range` :param headers: HTTP头部 :type headers: 可以是dict，建议是oss2.CaseInsensitiveDict，必须和签名时保持一致 :param progress_callback: 用户指定的进度回调函数。参考 :ref:`progress_callback` :return: file-like object :raises: 如果文件不存在，则抛出 :class:`NoSuchKey ` ；还可能抛出其他异常 rEr rrrFrGrHz\Start to get object with url from CryptoBucket: {0}, sign_url: {1}, range: {2}, headers: {3}rI)r0rK)r rqueryrPROCESSr rr2r1rrMrrrrr'_do_urlrQr+) r$r>rRr0r:rZrLrTrUrVrWrXr.r.r/get_object_with_urls:    z CryptoBucket.get_object_with_urlcCr<)Nz.The operation is not support for Crypto Bucketr )r$r8select_meta_paramsr.r.r/create_select_object_metaz&CryptoBucket.create_select_object_metacCr<r@r )r$r8sqlr: select_paramsr.r.r/ select_objectrDzCryptoBucket.select_objectcst|}|||r|jstdtd|j|j|jr2|j j |j|j}|s1tdn |j j |j|_|j }||_|||}tt|||}|S)u客户端加密初始化分片上传。 :param params :param upload_context :param headers: HTTP头部 :type headers: 可以是dict，建议是oss2.CaseInsensitiveDict :return: :class:`InitMultipartUploadResult ` 返回值中的 `crypto_multipart_context` 记录了加密Meta信息，在upload_part时需要一并传入 zSIt is not support none upload_context and must specify data_size of upload_context zNStart to init multipart upload by CryptoBucket, data_size: {0}, part_size: {1}z:part_size is invalid for multipart upload for CryptoBucket)rr2r1 data_sizer rinfor part_sizerr5is_valid_part_sizedetermine_part_sizer3r;r6rrinit_multipart_upload)r$r8r0rJupload_contextresr;rXr,r.r/ris$    z"CryptoBucket.init_multipart_uploadcstd||t|}|||r|}ntd|j} | j|j j j ks.| j |j j kr5d} t | || ||}|j | j} |j | j} |j|d} |j j | }t| j }|| | ||j ||}tt|||||||}|S)u客户端加密上传一个分片。 :param upload_context: :param str key: 待上传文件名，这个文件名要和 :func:`init_multipart_upload` 的文件名一致。 :param str upload_id: 分片上传ID :param int part_number: 分片号，最小值是1. :param data: 待上传数据。 :param progress_callback: 用户指定进度回调函数。可以用来实现进度条等功能。参考 :ref:`progress_callback` 。 :param headers: 用户指定的HTTP头部。可以指定Content-MD5头部等 :type headers: 可以是dict，建议是oss2.CaseInsensitiveDict :return: :class:`PutObjectResult ` zMStart to upload multipart of CryptoBucket, upload_id = {0}, part_number = {1}zWCould not init upload context, upload contexts flag is False and upload context is nonez@Envelope or data encryption/decryption algorithm is inconsistentr)rrerrr2r1r r;cek_algrr5algwrap_algInconsistentErrorr6decrypt_encrypted_key encrypted_keydecrypt_encrypted_iv encrypted_ivrf calc_offsetcopy initializer4rr upload_part)r$r8 upload_id part_numberr9r:r0rjcontextr;err_msg plain_keyplain_ivoffsetcounterr5rXr,r.r/rw's4     zCryptoBucket.upload_partc s^td|t|}||ztt|||||}W|St y.}z|d}~ww)u客户端加密完成分片上传，创建文件。 当所有分片均已上传成功，才可以调用此函数 :param str key: 待上传的文件名，这个文件名要和 :func:`init_multipart_upload` 的文件名一致。 :param str upload_id: 分片上传ID :param parts: PartInfo列表。PartInfo中的part_number和etag是必填项。其中的etag可以从 :func:`upload_part` 的返回值中得到。 :type parts: list of `PartInfo ` :param headers: HTTP头部 :type headers: 可以是dict，建议是oss2.CaseInsensitiveDict :return: :class:`PutObjectResult ` zCStart to complete multipart upload of CryptoBucket, upload_id = {0}N) rrerrr2r1rrcomplete_multipart_uploadr)r$r8rxpartsr0rXer,r.r/rVs  z&CryptoBucket.complete_multipart_uploadc sZtd|t|}||z tt|||}W|St y,}z|d}~ww)uU取消分片上传。 :param headers: 可以是dict，建议是oss2.CaseInsensitiveDict :param str key: 待上传的文件名，这个文件名要和 :func:`init_multipart_upload` 的文件名一致。 :param str upload_id: 分片上传ID :return: :class:`RequestResult ` z@Start to abort multipart upload of CryptoBucket, upload_id = {0}N) rrerrr2r1rrabort_multipart_uploadr)r$r8rxr0rXrr,r.r/rps  z#CryptoBucket.abort_multipart_uploadcCr<)u!分片拷贝。把一个已有文件的一部分或整体拷贝成目标文件的一个分片。 :param target_part_number: :param target_upload_id: :param target_key: :param source_key: :param source_bucket_name: :param byte_range: 指定待拷贝内容在源文件里的范围。参见 :ref:`byte_range` :param headers: HTTP头部 :type headers: 可以是dict，建议是oss2.CaseInsensitiveDict :return: :class:`PutObjectResult ` r=r )r$source_bucket_name source_keyrR target_keytarget_upload_idtarget_part_numberr0r.r.r/upload_part_copyszCryptoBucket.upload_part_copycCr<r@r )r$r8rSr.r.r/process_objectr`zCryptoBucket.process_object) FNNrTNNNF)NN)NNN)NNNNN)N)__name__ __module__ __qualname____doc__rr1r7r?rCrYr]r_rcrirwrrrr __classcell__r.r.r,r/rsT  !   @ 2 &/ r)rrrrapirmodelscompatrrr cryptor r rurlogging getLoggerrrrr.r.r.r/s