/var/opt/nydus/ops/mysql/connector/plugins/__pycache__
Edit: /var/opt/nydus/ops/mysql/connector/plugins/__pycache__/authentication_oci_client.cpython-312.pyc (10239B)
N j$ ^ d Z ddlZddlZddlmZ ddlmZ ddlmZm Z m
Z
m Z ddl m
Z
ddlmZ erdd lmZ dd
lmZ dd lmZmZ dd lmZ dd
lmZ ddl m Z m Z ddl m Z dZ dZ!dZ"dZ#dZ$ G d de Z%y# e$ r e
j6 d dw xY w# e$ r e
j6 d dw xY w)zOCI Authentication Plugin. N) b64encode)Path)
TYPE_CHECKINGAnyDictOptional )errors)logger) MySQLSocket)UnsupportedAlgorithm)hashes
serialization)padding)PRIVATE_KEY_TYPESz'Package 'cryptography' is not installed)config
exceptionszGPackage 'oci' (Oracle Cloud Infrastructure Python SDK) is not installed )MySQLAuthPluginMySQLOCIAuthPlugini ( z0Ephemeral security token is too large (10KB max)zGEphemeral security token file ('security_token_file') could not be readzKOCI configuration file does not contain a 'fingerprint' or 'key_file' entryc e Zd ZU dZdZeed< dZeed< e j Z eed< e de
deeef d efd
Ze d ed efd Zd eeef fd
Zed efd Zed efd Zde
ded ee
fdZddde
ded e
fdZy)r z2Implement the MySQL OCI IAM authentication plugin.NcontextDEFAULToci_config_profileoci_config_file signature
oci_configreturnc t | }|d |j d}|j d r^ t |d }|j j
t kD rt j t |j d |d< t j |d S # t t f$ r }t j t |d}~ww xY w)
a= Prepare client's authentication response
Prepares client's authentication response in JSON format
Args:
signature (bytes): server's nonce to be signed by client.
oci_config (dict): OCI configuration object.
Returns:
str: JSON string with the following format:
{"fingerprint": str, "signature": str, "token": base64.base64.base64}
Raises:
ProgrammingError: If the ephemeral security token file can't be open or the
token is too large.
fingerprint)r r security_token_filezutf-8)encodingtokenN),:)
separators)r decodegetr statst_sizeOCI_SECURITY_TOKEN_MAX_SIZEr
ProgrammingError OCI_SECURITY_TOKEN_TOO_LARGE read_textOSError UnicodeError%OCI_SECURITY_TOKEN_FILE_NOT_AVAILABLEjsondumps)r r signature_64
auth_responser! errs b/opt/nydus/tmp/pip-target-a90h98xg/lib/python/mysql/connector/plugins/authentication_oci_client.py_prepare_auth_responsez)MySQLOCIAuthPlugin._prepare_auth_responseQ s " !+ %m4%,,.
>>/ 0
&*:6K+L&M#&++-558SS 112NOO)<)F)FPW)F)X
g&
zz-J?? \*
--9
s A B( (C7CCkey_pathc H t t j j | d 5 }t j
|j
d }ddd |S # 1 sw Y S xY w# t t t t f$ r }t j d| d| d}~ww xY w)z+Get the private_key form the given locationrbN)passwordz2An error occurred while reading the API_KEY from "z": )
openospath
expanduserr load_pem_private_keyread TypeErrorr/
ValueErrorr
r
r, )r9 key_file private_keyr6 s r7 _get_private_keyz#MySQLOCIAuthPlugin._get_private_keyy s
bgg((2D9X + @ @ MMO ! : :
7J0DE )) :S'
s4 )A( &AA( A% A( %A( (B!B B!c g }d d d}i } t j | j xs t j | j xs d }|j D ]+ \ }} || r ||| s|j
d| d - |r%t j d | j d
| |S # t $ r |j
d| Y ww xY w# t j t j t j t j t j f$ r$}|j
t | Y d}~d}~ww xY w) z=Get a valid OCI config from the given configuration file pathc t | dkD S )N )lenxs r7
z:MySQLOCIAuthPlugin._get_valid_oci_config.. s c!frk c z t j j t j j | S )N)r> r? existsr@ rL s r7 rN z:MySQLOCIAuthPlugin._get_valid_oci_config.. s 277>>"''2D2DQ2G#HrO )r rE r z Parameter "z " is invalidzDoes not contain parameter NzInvalid oci-config-file: z. Errors found: )r from_filer DEFAULT_LOCATIONr itemsappendKeyErrorr ConfigFileNotFound
InvalidConfigInvalidKeyFilePathInvalidPrivateKeyProfileNotFoundstrr
r, )self
error_listreq_keysr req_key req_valuer6 s r7 _get_valid_oci_configz(MySQLOCIAuthPlugin._get_valid_oci_config sZ
1H
&(
( ))$$?(?(?''49J '/nn&6"O!'*9Z=P3Q"))Ky *MN '7" ))+D,@,@+A B!!+ .
% O %%(CG9&MNO
) ) $ $ ) ) ( ( & &
(
c#h ' ' (s= AC $%B5 C 5 CC CC AE (EE c y)zPlugin official name.authentication_oci_client r] s r7 namezMySQLOCIAuthPlugin.name s +rO c y)z'Signals whether or not SSL is required.Fre rf s r7 requires_sslz MySQLOCIAuthPlugin.requires_ssl s rO auth_datakwargsc h t j d|t | | j }| j |d }|j |t
j t j }| j || }t j d| |j S )z-Prepare authentication string for the server.zserver nonce: %s, len %drE zauthentication response: %s) r debugrK rb rG signr PKCS1v15r SHA256r8 encode)r] rj rk r rF r r5 s r7 r5 z MySQLOCIAuthPlugin.auth_response s /C NK//1
++Jz,BC $$Y0@0@0BFMMOT 33IzJ
2MB ##%%rO sockr c |j dd | _ |j dt j | _ t j d| j | j |fi |}|t j d t j d|t | |j | |j }t j d| t | S )aS Handles server's `auth switch request` response.
Args:
sock: Pointer to the socket connection.
auth_data: Plugin provided data (extracted from a packet
representing an `auth switch request` response).
kwargs: Custom configuration to be passed to the auth plugin
when invoked. The parameters defined here will override the ones
defined in the auth plugin itself.
Returns:
packet: Last server's response after back-and-forth
communication.
r r r z!# oci configuration file path: %szGot a NULL auth responsez# request: %s size: %sz # server response packet: %s)r( r r rS r r rm r5 r
InterfaceErrorrK sendrecvbytes)r] rr rj rk responsepackets r7 auth_switch_responsez'MySQLOCIAuthPlugin.auth_switch_response s " &zz*;Y G "(** &"9"9#
8$:N:NO%4%%i:6: ''(BC C -xX G ( 3V<V} rO )__name__
__module__ __qualname____doc__r r __annotations__r r\ r rS r staticmethodrw r r8 r rG rb propertyrg boolri r r5 rz re rO r7 r r J s <GS ''!22OS2%@% %@T#s(^ %@PS %@ %@N 3 +< &tCH~ &P +c + + d &u & & &! !! .3! ?B! ! rO )&r~ r2 r> base64r pathlibr typingr r r r r
r networkr cryptography.exceptionsr
cryptography.hazmat.primitivesr r )cryptography.hazmat.primitives.asymmetricr /cryptography.hazmat.primitives.asymmetric.typesr ImportErrorr, ocir r r AUTHENTICATION_PLUGIN_CLASSr+ r- r1 OCI_PROFILE_MISSING_PROPERTIESr re rO r7 r s > ! 5 5 %W<DAQ& 2 ' Q M & R
` ` / W
!&
!
!"K
LRVVW
!&
!
!Q s A7 B 7BB,