Ë
|
Wñúh¾$ ã ó^ d Z ddlZddlZddlmZ ddlmZ ddlmZm Z m
|
Z
|
m Z ddl m Z ddlmZ erdd lmZ dd
|
lmZ dd lmZmZ dd lmZ dd lmZ ddl m Z m Z ddl m!Z! dZ"dZ#dZ$dZ%dZ& G d de!« Z'y# e$ r e j8 d« dw xY w# e$ r e j8 d« dw xY w)zOCI Authentication Plugin.é N)Ú b64encode)ÚPath)Ú TYPE_CHECKINGÚAnyÚDictÚOptional)Úerrors)Úloggeré )Ú MySQLSocket)ÚUnsupportedAlgorithm)ÚhashesÚ serialization)Úpadding)ÚPRIVATE_KEY_TYPESz'Package 'cryptography' is not installed)ÚconfigÚ
|
exceptionszGPackage 'oci' (Oracle Cloud Infrastructure Python SDK) is not installedé )ÚMySQLAuthPluginÚMySQLOCIAuthPlugini ( z0Ephemeral security token is too large (10KB max)zGEphemeral security token file ('security_token_file') could not be readzKOCI configuration file does not contain a 'fingerprint' or 'key_file' entryc ó e Zd ZU dZdZeed< dZeed< e j Z eed< e de deeef d efd
|
« Ze d ed efd « Zd eeef fd Zed efd« Zed efd« Zde ded ee fdZddde ded e fdZy)r z2Implement the MySQL OCI IAM authentication plugin.NÚcontextÚDEFAULTÚoci_config_profileÚoci_config_fileÚ signatureÚ
|
oci_configÚreturnc ó² t | « }|d |j « d}|j d« r^ t |d « }|j « j
|
t kD rt j t « |j d¬« |d< t j |d¬ « S # t t f$ r }t j t « |d}~ww xY w)
|
a= Prepare client's authentication response
|
|
Prepares client's authentication response in JSON format
|
Args:
|
signature (bytes): server's nonce to be signed by client.
|
oci_config (dict): OCI configuration object.
|
|
Returns:
|
str: JSON string with the following format:
|
{"fingerprint": str, "signature": str, "token": base64.base64.base64}
|
|
Raises:
|
ProgrammingError: If the ephemeral security token file can't be open or the
|
token is too large.
|
Ú fingerprint)r r Úsecurity_token_filezutf-8)ÚencodingÚtokenN)ú,ú:)Ú
|
separators)r ÚdecodeÚgetr ÚstatÚst_sizeÚOCI_SECURITY_TOKEN_MAX_SIZEr ÚProgrammingErrorÚ OCI_SECURITY_TOKEN_TOO_LARGEÚ read_textÚOSErrorÚ UnicodeErrorÚ%OCI_SECURITY_TOKEN_FILE_NOT_AVAILABLEÚjsonÚdumps)r r Ú signature_64Ú auth_responser! Úerrs úhH:\Change_password\venv_build\Lib\site-packages\mysql/connector/aio/plugins/authentication_oci_client.pyÚ_prepare_auth_responsez)MySQLOCIAuthPlugin._prepare_auth_responseQ sÔ ô" ! Ó+ à% mÑ4Ø%×,Ñ,Ó.ñ
|
ð >>Ð/Ô 0ð Ü&*¨:Ð6KÑ+LÓ&MÐ#à&×+Ñ+Ó-×5Ñ5Ô8SÒSÜ ×1Ñ1Ô2NÓOÐOØ)<×)FÑ)FÐPWÐ)FÓ)X gÑ&ô
|
zz-°JÔ?Ð?øô \Ð*ò Ü ×-Ñ-Ü9óàðûð ús ´A B( Â(CÂ7CÃCÚkey_pathc óH t t j j | « d« 5 }t j
|
|j « d¬« }ddd« |S # 1 sw Y S xY w# t t t t f$ r }t j d| d| « d}~ww xY w)z+Get the private_key form the given locationÚrbN)Úpasswordz2An error occurred while reading the API_KEY from "z": ) ÚopenÚosÚpathÚ
|
expanduserr Úload_pem_private_keyÚreadÚ TypeErrorr/ Ú
|
ValueErrorr r r, )r9 Úkey_fileÚ private_keyr6 s r7 Ú_get_private_keyz#MySQLOCIAuthPlugin._get_private_keyy s¡ ð
|
Übgg×(Ñ(¨Ó2°DÓ9ð ¸XÜ +× @Ñ @Ø MMOØ !ô ÷ ð Ð÷ ð Ðûô 7¤JÔ0DÐEò Ü×)Ñ)ðØ :S ð'óð ûð ús4 )A( «&AÁA( ÁA%Á A( Á%A( Á(B!ÂB  B!c ó g }d d d}i } t j | j xs t j | j xs d« }|j « D ]+ \ }} || r ||| « s|j d| d« - |r%t j d | j d
|
| « |S # t $ r |j d| « Y ww xY w# t j t j t j t j t j f$ r$}|j t |« « Y d}~»d}~ww xY w) z=Get a valid OCI config from the given configuration file pathc ó t | « dkD S )Né )Úlen©Úxs r7 ú<lambda>z:MySQLOCIAuthPlugin._get_valid_oci_config.<locals>.<lambda> s ¤c¨!£f¨r¡k ó c óz t j j t j j | « « S )N)r> r? Úexistsr@ rL s r7 rN z:MySQLOCIAuthPlugin._get_valid_oci_config.<locals>.<lambda> s" ¤2§7¡7§>¡>´"·'±'×2DÑ2DÀQÓ2GÓ#H rO )r rE r z Parameter "z " is invalidzDoes not contain parameter NzInvalid oci-config-file: z. Errors found: )r Ú from_filer ÚDEFAULT_LOCATIONr ÚitemsÚappendÚKeyErrorr ÚConfigFileNotFoundÚ InvalidConfigÚInvalidKeyFilePathÚInvalidPrivateKeyÚProfileNotFoundÚstrr r, )ÚselfÚ
|
error_listÚreq_keysr Úreq_keyÚ req_valuer6 s r7 Ú_get_valid_oci_configz(MySQLOCIAuthPlugin._get_valid_oci_config sa à
|
á 1ÙHñ
|
ð
|
&(
|
ð (ä ×)Ñ)Ø×$Ñ$Ò?¬×(?Ñ(?Ø×'Ñ'Ò4¨9óJð '/§n¡nÓ&6ò OÑ"ðOà! 'Ò*±9¸ZÈÑ=PÔ3QØ"×)Ñ)¨K¸°yÀ Ð*MÔNøñ Oñ" Ü×)Ñ)Ø+¨D×,@Ñ,@Ð+Að B!Ø!+ ð.óð ð
|
Ðøô% ò OØ ×%Ñ%Ð(CÀGÀ9Ð&MÖNðOûô × )Ñ )Ü × $Ñ $Ü × )Ñ )Ü × (Ñ (Ü × &Ñ &ð
|
ò (ð × Ñ c #h× 'Ñ 'ûð (ús= AC Á$%B5Â C Â5 CÃC ÃCÃC ÃAE Ä(EÅE c ó y)zPlugin official name.Úauthentication_oci_client© ©r] s r7 ÚnamezMySQLOCIAuthPlugin.name² s ð +rO c ó y)z'Signals whether or not SSL is required.Fre rf s r7 Ú requires_sslz MySQLOCIAuthPlugin.requires_ssl· s ð rO Ú auth_dataÚkwargsc óh t j d|t |« « | j « }| j |d « }|j |t j « t j « « }| j ||« }t j d|« |j « S )z-Prepare authentication string for the server.zserver nonce: %s, len %drE zauthentication response: %s) r
|
ÚdebugrK rb rG Úsignr ÚPKCS1v15r ÚSHA256r8 Úencode)r] rj rk r rF r r5 s r7 r5 z MySQLOCIAuthPlugin.auth_response¼ s ä Ð/°¼CÀ »NÔKà×/Ñ/Ó1
|
à×+Ñ+¨J°zÑ,BÓC Ø ×$Ñ$ Y´×0@Ñ0@Ó0BÄFÇMÁMÃOÓT à ×3Ñ3°I¸zÓJ Ü Ð2°MÔBØ ×#Ñ#Ó%Ð%rO Úsockr c ó K |j dd« | _ |j dt j « | _ t j d| j « | j |fi |¤}|t j d« t j d|t |« « |j |« d{ |j « d{ }t j d|« t |« S 7 =7 'w) aS Handles server's `auth switch request` response.
|
|
Args:
|
sock: Pointer to the socket connection.
|
auth_data: Plugin provided data (extracted from a packet
|
representing an `auth switch request` response).
|
kwargs: Custom configuration to be passed to the auth plugin
|
when invoked. The parameters defined here will override the ones
|
defined in the auth plugin itself.
|
|
Returns:
|
packet: Last server's response after back-and-forth
|
communication.
|
r r r z!# oci configuration file path: %sNzGot a NULL auth responsez# request: %s size: %sz # server response packet: %s)r( r r rS r r
|
rm r5 r ÚInterfaceErrorrK ÚwriterB Úbytes)r] rr rj rk ÚresponseÚpackets r7 Úauth_switch_responsez'MySQLOCIAuthPlugin.auth_switch_responseÉ sÕ è ø ð" &zzÐ*;¸YÓ GÔ Ø"(§*¡*Ø ¤&×"9Ñ"9ó#
|
Ô ô Ð8¸$×:NÑ:NÔOà%4×%Ñ% iÑ:°6Ñ:Ø Ð Ü×'Ñ'Ð(BÓCÐ Cä Ð-¨x¼¸X» ÔGØjjÓ"×"Ð"àyy{×"Ü Ð3°VÔ<äV}Ð ð #øà"ús$ B;C?Â=C;Â>C?ÃC=Ã&C?Ã=C?)Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__r r Ú__annotations__r r\ r rS r Ú staticmethodrv r r8 r rG rb Úpropertyrg Úboolri r r5 ry re rO r7 r r J s
Ù<àGSÓØ 'ÐÓ'Ø!×2Ñ2OSÓ2àð%@¨%ð %@¸TÀ#ÀsÀ(¹^ð %@ÐPSò %@ó ð%@ðN ð 3ð Ð+<ò ó ðð & t¨C°¨H¡~ó &ðP ð+cò +ó ð+ð ðdò ó ðð & uð &¸ð &ÀÈÁó &ð! Ø!ð! Ø.3ð! Ø?Bð! à ô! rO )(r} r2 r> Úbase64r Úpathlibr Útypingr r r r Úmysql.connectorr Úmysql.connector.loggerr
|
Únetworkr Úcryptography.exceptionsr Ú cryptography.hazmat.primitivesr r Ú)cryptography.hazmat.primitives.asymmetricr Ú/cryptography.hazmat.primitives.asymmetric.typesr Ú ImportErrorr, Úocir r Ú r ÚAUTHENTICATION_PLUGIN_CLASSr+ r- r1 Ú OCI_PROFILE_MISSING_PROPERTIESr re rO r7 ú<module>r sÏ ðñ> !ã Û å Ý ß 5Ó 5å "Ý )áÝ%ðWÝ<ßDÝAÝQðß&õ à 2Ð Ø 'Ð Ø QÐ àMð &ð Rð ô
|
` õ ` øð/ ò WØ
|
!&×
|
!Ñ
|
!Ð"KÓ
|
LÐRVÐVðWûð
|
ò Ø
|
!&×
|
!Ñ
|
!ØQó à ððús ¸A7 ÁB Á7BÂB,
|
