File: //var/opt/nydus/ops/mysql/connector/plugins/__pycache__/authentication_oci_client.cpython-39.pyc
a
�,�h�$ � @ s, d Z ddlZddlZddlmZ ddlmZ ddlmZm Z m
Z
m Z ddl m
Z
ddlmZ erldd lmZ z8dd
lmZ dd lmZmZ dd lmZ dd
lmZ W n ey� e
�d�d�Y n0 zddl m Z m Z W n ey� e
�d�d�Y n0 ddl m Z dZ dZ!dZ"dZ#dZ$G dd� de �Z%dS )zOCI Authentication Plugin.� N)� b64encode)�Path)�
TYPE_CHECKING�Any�Dict�Optional� )�errors)�logger)� MySQLSocket)�UnsupportedAlgorithm)�hashes�
serialization)�padding)�PRIVATE_KEY_TYPESz'Package 'cryptography' is not installed)�config�
exceptionszGPackage 'oci' (Oracle Cloud Infrastructure Python SDK) is not installed� )�MySQLAuthPlugin�MySQLOCIAuthPlugini ( z0Ephemeral security token is too large (10KB max)zGEphemeral security token file ('security_token_file') could not be readzKOCI configuration file does not contain a 'fingerprint' or 'key_file' entryc @ s� e Zd ZU dZdZeed< dZeed< e j
Z eed< e e
eeef ed�dd ��Ze eed
�d d ��Zeeef d
�dd�Zeed
�dd��Zeed
�dd��Ze
eee
d�dd�Zde
ee
d�dd�ZdS )r z2Implement the MySQL OCI IAM authentication plugin.N�context�DEFAULT�oci_config_profile�oci_config_file)� signature�
oci_config�returnc
C s� t | �}|d |�� d�}|�d�r�z8t|d �}|�� jtkrJt�t ��|j
dd�|d< W n4 t t fy� } zt�t
�|�W Y d}~n
d}~0 0 tj|dd �S )
a= Prepare client's authentication response
Prepares client's authentication response in JSON format
Args:
signature (bytes): server's nonce to be signed by client.
oci_config (dict): OCI configuration object.
Returns:
str: JSON string with the following format:
{"fingerprint": str, "signature": str, "token": base64.base64.base64}
Raises:
ProgrammingError: If the ephemeral security token file can't be open or the
token is too large.
� fingerprint)r r �security_token_filezutf-8)�encoding�tokenN)�,�:)�
separators)r �decode�getr �stat�st_size�OCI_SECURITY_TOKEN_MAX_SIZEr �ProgrammingError� OCI_SECURITY_TOKEN_TOO_LARGE� read_text�OSError� UnicodeError�%OCI_SECURITY_TOKEN_FILE_NOT_AVAILABLE�json�dumps)r r Z signature_64�
auth_responser �err� r3 �d/opt/nydus/tmp/pip-target-wkfpz8uv/lib64/python/mysql/connector/plugins/authentication_oci_client.py�_prepare_auth_responseQ s" �
��z)MySQLOCIAuthPlugin._prepare_auth_response)�key_pathr c C s� zHt tj�| �d��"}tj|�� dd�}W d � n1 s<0 Y W nB ttt t
fy� } z"t � d| � d|� ���W Y d}~n
d}~0 0 |S )z+Get the private_key form the given location�rbN)�passwordz2An error occurred while reading the API_KEY from "z": )
�open�os�path�
expanduserr Zload_pem_private_key�read� TypeErrorr, �
ValueErrorr r r) )r6 �key_file� private_keyr2 r3 r3 r4 �_get_private_keyy s �(���z#MySQLOCIAuthPlugin._get_private_key)r c C s g }dd� dd� d�}i }z~t �| jp*t j| jp2d�}|�� D ]V\}}z*|| rn||| �sn|�d|� d�� W q> ty� |�d|� �� Y q>0 q>W nF tj tj
tj tj tj
fy� } z|�t|�� W Y d }~n
d }~0 0 |r�t�d
| j� d |� ���|S ) z=Get a valid OCI config from the given configuration file pathc S s t | �dkS )N� )�len��xr3 r3 r4 �<lambda>� � z:MySQLOCIAuthPlugin._get_valid_oci_config.<locals>.<lambda>c S s t j�t j�| ��S )N)r: r; �existsr< rE r3 r3 r4 rG � rH )r r@ r z Parameter "z " is invalidzDoes not contain parameter NzInvalid oci-config-file: z. Errors found: )r � from_filer �DEFAULT_LOCATIONr �items�append�KeyErrorr ZConfigFileNotFoundZ
InvalidConfigZInvalidKeyFilePathZInvalidPrivateKeyZProfileNotFound�strr r) )�selfZ
error_listZreq_keysr Zreq_keyZ req_valuer2 r3 r3 r4 �_get_valid_oci_config� s> �
� � $
��z(MySQLOCIAuthPlugin._get_valid_oci_configc C s dS )zPlugin official name.Zauthentication_oci_clientr3 �rP r3 r3 r4 �name� s zMySQLOCIAuthPlugin.namec C s dS )z'Signals whether or not SSL is required.Fr3 rR r3 r3 r4 � requires_ssl� s z MySQLOCIAuthPlugin.requires_ssl)� auth_data�kwargsr c K s^ t �d|t|�� | �� }| �|d �}|�|t�� t� � �}| �
||�}t �d|� |� � S )z-Prepare authentication string for the server.zserver nonce: %s, len %dr@ zauthentication response: %s) r
�debugrD rQ rB �signr ZPKCS1v15r
�SHA256r5 �encode)rP rU rV r rA r r1 r3 r3 r4 r1 � s z MySQLOCIAuthPlugin.auth_responser )�sockrU rV r c K s� |� dd�| _|� dtj�| _t�d| j� | j|fi |��}|du rPt� d��t�d|t
|�� |� |� |� � }t�d|� t
|�S ) aS Handles server's `auth switch request` response.
Args:
sock: Pointer to the socket connection.
auth_data: Plugin provided data (extracted from a packet
representing an `auth switch request` response).
kwargs: Custom configuration to be passed to the auth plugin
when invoked. The parameters defined here will override the ones
defined in the auth plugin itself.
Returns:
packet: Last server's response after back-and-forth
communication.
r r r z!# oci configuration file path: %sNzGot a NULL auth responsez# request: %s size: %sz # server response packet: %s)r% r r rK r r
rW r1 r ZInterfaceErrorrD �send�recv�bytes)rP r[ rU rV �response�packetr3 r3 r4 �auth_switch_response� s �
z'MySQLOCIAuthPlugin.auth_switch_response)�__name__�
__module__� __qualname__�__doc__r r �__annotations__r rO r rK r � staticmethodr^ r r5 r rB rQ �propertyrS �boolrT r r1 ra r3 r3 r3 r4 r J s"
'(�)&re r/ r: �base64r �pathlibr �typingr r r r � r r
�networkr Zcryptography.exceptionsr Z cryptography.hazmat.primitivesr
r Z)cryptography.hazmat.primitives.asymmetricr Z/cryptography.hazmat.primitives.asymmetric.typesr � ImportErrorr) Zocir r r ZAUTHENTICATION_PLUGIN_CLASSr( r* r. Z OCI_PROFILE_MISSING_PROPERTIESr r3 r3 r3 r4 �<module> sB �� ��