ruạṛ
a �u:j� � @ s� d dl Z d dlZd dlZd dlZd dlmZ d dlmZmZ d dl m Z m Z d dl m Z d dlmZmZ d dlZG dd� d�ZdS ) � N)�Optional)�Request�Response)�hashes� serialization)�padding)�cbs_callback_uuid_context� cbs_custom_callback_url_contextc @ sr e Zd Zeed�dd�Zeee d�dd�Zee d�dd �Z e ee d �d d �Z eed �dd�Z eed �dd�ZdS )�SignedTokenStrategy)� valid_user�public_key_pathc C s& || _ || _t�� | _t�d�| _d S )NZbart)r r �socket� gethostname�current_hostname�logging� getLogger�logger)�selfr r � r �Y/opt/bart/bart_venv/lib/python3.9/site-packages/app/auth_framework/SignedTokenStrategy.py�__init__ s z SignedTokenStrategy.__init__)�request�returnc � sF |j �d�}|j �d�}|r&|�d�sD| �d|� tddddid �S �z�|�d �d }d |vrx| �d |� tddd�W S |�d d �\}}t�|��� }t�|��� }|| j kr�| �d|� tddd�W S t � |�} | d } | d } | �d�} | �d�} | �d�}| �d�}| | ||d�}dd� |� � D �}|�rJ| �d|� tddd�W S t t�� �t |�k�r�| �d t t�� �� d t |�� d �|� tddd�W S | �| |��s�| �d |� tddd�W S | �| | ��s�| �d |� tddd�W S t�|� |�r�t�|� W d S t�y@ } z$| �d |� tddd�W Y d }~S d }~0 0 d S )!N� Authorizationz X-BART-CBS-Custom-Callback-URLzBasic ZMISSING_OR_INCORRECT_HEADER� Unauthorizedi� zWWW-AuthenticateZBasic)� status_code�headers� � �:Z BAD_FORMATz Invalid token)r Z INVALID_USERi� �payload� signature�job_id�server_hostname�expiry�uuid)r" r# r$ r% c S s g | ]\}}|s|�qS r r )�.0�k�vr r r � <listcomp>7 � z4SignedTokenStrategy.authenticate.<locals>.<listcomp>ZMISSING_FIELDSz EXPIRED [�]ZHOSTNAME_MISMATCHZ BAD_SIGNATUREZ EXCEPTION)r �get� startswith�_auth_log_errorr �split�base64� b64decode�decoder �json�loads�items�int�time�_is_valid_hostname_match�_verify_signaturer �setr � Exception)r r � auth_headerZcbs_custom_callback_url�encodedZ user_encodedZtoken_b64_encoded�userZ token_json�tokenr � signature_b64r" r# r$ r% Zrequired_fields�missing�er r r � authenticate sX & z SignedTokenStrategy.authenticate)r# r c C sz || j krdS z$t�t�� �d }||v r0W dS W n6 tyh } z | j�d|� �� W Y d }~n d }~0 0 | �d|� dS )NT� z Failed to resolve local IPs: ZSERVER_HOSTNAME_MISMATCH)r r �gethostbyname_exr r; r �warning�_auth_log_warning)r r# r Z local_ipsrB r r r r8 T s ( z,SignedTokenStrategy._is_valid_hostname_match)r r@ r c C s� zvt | jd�� }t�|�� �}W d � n1 s20 Y tj|ddd��� }t� |�}|� ||t � � t �� � W dS ty� Y dS 0 d S )N�rb)�,r T)� separators� sort_keysF)�openr r Zload_pem_public_key�readr3 �dumps�encoder0 r1 �verifyr ZPKCS1v15r �SHA256r; )r r r@ �key_fileZ public_key� canonicalr! r r r r9 d s , � z%SignedTokenStrategy._verify_signature)�coder c C s | j �d|� d|jj� �� d S )N�[AUTH:� ] Authentication failure from )r �error�client�host�r rT r r r r r. v s z#SignedTokenStrategy._auth_log_errorc C s" | j �d|� d|jj� d�� d S )NrU rV z. Continuing anyway.)r rF rX rY rZ r r r rG y s z%SignedTokenStrategy._auth_log_warningN)�__name__� __module__� __qualname__�strr r r r rC �boolr8 �dictr9 r. rG r r r r r s >r )r0 r3 r7 r �typingr Zfastapir r Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr Zapp.utils.request_contextr r r r r r r r �<module> s
cải xoăn