Server IP : 195.201.23.43 / Your IP : 18.191.236.98 Web Server : Apache System : Linux webserver2.vercom.be 5.4.0-192-generic #212-Ubuntu SMP Fri Jul 5 09:47:39 UTC 2024 x86_64 User : kdecoratie ( 1041) PHP Version : 7.1.33-63+ubuntu20.04.1+deb.sury.org+1 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/pymacaroons/caveat_delegates/ |
Upload File : |
from __future__ import unicode_literals import binascii from nacl.secret import SecretBox from pymacaroons import Caveat from pymacaroons.utils import ( convert_to_bytes, truncate_or_pad, generate_derived_key, sign_third_party_caveat, ) from pymacaroons.exceptions import MacaroonUnmetCaveatException from .base_third_party import ( BaseThirdPartyCaveatDelegate, BaseThirdPartyCaveatVerifierDelegate, ) class ThirdPartyCaveatDelegate(BaseThirdPartyCaveatDelegate): def __init__(self, *args, **kwargs): super(ThirdPartyCaveatDelegate, self).__init__(*args, **kwargs) def add_third_party_caveat(self, macaroon, location, key, key_id, **kwargs): derived_key = truncate_or_pad( generate_derived_key(convert_to_bytes(key)) ) old_key = truncate_or_pad(binascii.unhexlify(macaroon.signature_bytes)) box = SecretBox(key=old_key) verification_key_id = box.encrypt( derived_key, nonce=kwargs.get('nonce') ) caveat = Caveat( caveat_id=key_id, location=location, verification_key_id=verification_key_id, version=macaroon.version ) macaroon.caveats.append(caveat) encode_key = binascii.unhexlify(macaroon.signature_bytes) macaroon.signature = sign_third_party_caveat( encode_key, caveat._verification_key_id, caveat._caveat_id ) return macaroon class ThirdPartyCaveatVerifierDelegate(BaseThirdPartyCaveatVerifierDelegate): def __init__(self, *args, **kwargs): super(ThirdPartyCaveatVerifierDelegate, self).__init__(*args, **kwargs) def verify_third_party_caveat(self, verifier, caveat, root, macaroon, discharge_macaroons, signature): caveat_macaroon = self._caveat_macaroon(caveat, discharge_macaroons) caveat_key = self._extract_caveat_key(signature, caveat) caveat_met = verifier.verify_discharge( root, caveat_macaroon, caveat_key, discharge_macaroons=discharge_macaroons ) return caveat_met def update_signature(self, signature, caveat): return binascii.unhexlify( sign_third_party_caveat( signature, caveat._verification_key_id, caveat._caveat_id ) ) def _caveat_macaroon(self, caveat, discharge_macaroons): # TODO: index discharge macaroons by identifier caveat_macaroon = next( (m for m in discharge_macaroons if m.identifier_bytes == caveat.caveat_id_bytes), None) if not caveat_macaroon: raise MacaroonUnmetCaveatException( 'Caveat not met. No discharge macaroon found for identifier: ' '{}'.format(caveat.caveat_id_bytes) ) return caveat_macaroon def _extract_caveat_key(self, signature, caveat): key = truncate_or_pad(signature) box = SecretBox(key=key) decrypted = box.decrypt(caveat._verification_key_id) return decryptedPrivate