| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561 |
- import calendar
- import json
- import time
- from urllib.parse import urlparse, parse_qs
- from Tea.core import TeaCore
- from alibabacloud_credentials.utils import auth_constant as ac
- from alibabacloud_credentials.utils import parameter_helper as ph
- from alibabacloud_credentials.exceptions import CredentialException
- from alibabacloud_credentials.models import CredentialModel
- class Credential:
- def get_access_key_id(self):
- return
- def get_access_key_secret(self):
- return
- def get_security_token(self):
- return
- async def get_access_key_id_async(self):
- return
- async def get_access_key_secret_async(self):
- return
- async def get_security_token_async(self):
- return
- def get_credential(self):
- return
- async def get_credential_async(self):
- return
- class _AutomaticallyRefreshCredentials:
- def __init__(self, expiration, provider):
- self.expiration = expiration
- self.provider = provider
- def _with_should_refresh(self):
- if self.expiration is None:
- return True
- return int(time.mktime(time.localtime())) >= (self.expiration - 180)
- def _get_new_credential(self):
- return self.provider.get_credentials()
- def _refresh_credential(self):
- if self._with_should_refresh():
- return self._get_new_credential()
- async def _get_new_credential_async(self):
- return await self.provider.get_credentials_async()
- async def _refresh_credential_async(self):
- if self._with_should_refresh():
- return await self._get_new_credential_async()
- class AccessKeyCredential(Credential):
- """AccessKeyCredential"""
- def __init__(self, access_key_id, access_key_secret):
- self.access_key_id = access_key_id
- self.access_key_secret = access_key_secret
- self.credential_type = ac.ACCESS_KEY
- def get_access_key_id(self):
- return self.access_key_id
- def get_access_key_secret(self):
- return self.access_key_secret
- async def get_access_key_id_async(self):
- return self.access_key_id
- async def get_access_key_secret_async(self):
- return self.access_key_secret
- def get_credential(self):
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- type=ac.ACCESS_KEY
- )
- async def get_credential_async(self):
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- type=ac.ACCESS_KEY
- )
- class BearerTokenCredential(Credential):
- """BearerTokenCredential"""
- def __init__(self, bearer_token):
- self.bearer_token = bearer_token
- self.credential_type = ac.BEARER
- def get_credential(self):
- return CredentialModel(
- bearer_token=self.bearer_token,
- type=ac.BEARER
- )
- async def get_credential_async(self):
- return CredentialModel(
- bearer_token=self.bearer_token,
- type=ac.BEARER
- )
- def get_type(self) -> str:
- return self.credential_type
- class EcsRamRoleCredential(Credential, _AutomaticallyRefreshCredentials):
- """EcsRamRoleCredential"""
- def __init__(self, access_key_id, access_key_secret, security_token, expiration, provider):
- super().__init__(expiration, provider)
- self.access_key_id = access_key_id
- self.access_key_secret = access_key_secret
- self.security_token = security_token
- self.credential_type = ac.ECS_RAM_ROLE
- def _refresh_credential(self):
- credential = super()._refresh_credential()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- self.security_token = credential.security_token
- async def _refresh_credential_async(self):
- credential = await super()._refresh_credential_async()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- self.security_token = credential.security_token
- def get_access_key_id(self):
- self._refresh_credential()
- return self.access_key_id
- def get_access_key_secret(self):
- self._refresh_credential()
- return self.access_key_secret
- def get_security_token(self):
- self._refresh_credential()
- return self.security_token
- async def get_access_key_id_async(self):
- await self._refresh_credential_async()
- return self.access_key_id
- async def get_access_key_secret_async(self):
- await self._refresh_credential_async()
- return self.access_key_secret
- async def get_security_token_async(self):
- await self._refresh_credential_async()
- return self.security_token
- def get_credential(self):
- self._refresh_credential()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.ECS_RAM_ROLE
- )
- async def get_credential_async(self):
- await self._refresh_credential_async()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.ECS_RAM_ROLE
- )
- class RamRoleArnCredential(Credential, _AutomaticallyRefreshCredentials):
- """RamRoleArnCredential"""
- def __init__(self, access_key_id, access_key_secret, security_token, expiration, provider):
- super().__init__(expiration, provider)
- self.access_key_id = access_key_id
- self.access_key_secret = access_key_secret
- self.security_token = security_token
- self.credential_type = ac.RAM_ROLE_ARN
- def _refresh_credential(self):
- credential = super()._refresh_credential()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- self.security_token = credential.security_token
- async def _refresh_credential_async(self):
- credential = await super()._refresh_credential_async()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- self.security_token = credential.security_token
- def get_access_key_id(self):
- self._refresh_credential()
- return self.access_key_id
- def get_access_key_secret(self):
- self._refresh_credential()
- return self.access_key_secret
- def get_security_token(self):
- self._refresh_credential()
- return self.security_token
- async def get_access_key_id_async(self):
- await self._refresh_credential_async()
- return self.access_key_id
- async def get_access_key_secret_async(self):
- await self._refresh_credential_async()
- return self.access_key_secret
- async def get_security_token_async(self):
- await self._refresh_credential_async()
- return self.security_token
- def get_credential(self):
- self._refresh_credential()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.RAM_ROLE_ARN
- )
- async def get_credential_async(self):
- await self._refresh_credential_async()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.RAM_ROLE_ARN
- )
- class OIDCRoleArnCredential(Credential, _AutomaticallyRefreshCredentials):
- """OIDCRoleArnCredential"""
- def __init__(self, access_key_id, access_key_secret, security_token, expiration, provider):
- super().__init__(expiration, provider)
- self.access_key_id = access_key_id
- self.access_key_secret = access_key_secret
- self.security_token = security_token
- self.credential_type = ac.OIDC_ROLE_ARN
- def _refresh_credential(self):
- credential = super()._refresh_credential()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- self.security_token = credential.security_token
- async def _refresh_credential_async(self):
- credential = await super()._refresh_credential_async()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- self.security_token = credential.security_token
- def get_access_key_id(self):
- self._refresh_credential()
- return self.access_key_id
- def get_access_key_secret(self):
- self._refresh_credential()
- return self.access_key_secret
- def get_security_token(self):
- self._refresh_credential()
- return self.security_token
- async def get_access_key_id_async(self):
- await self._refresh_credential_async()
- return self.access_key_id
- async def get_access_key_secret_async(self):
- await self._refresh_credential_async()
- return self.access_key_secret
- async def get_security_token_async(self):
- await self._refresh_credential_async()
- return self.security_token
- def get_credential(self):
- self._refresh_credential()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.OIDC_ROLE_ARN
- )
- async def get_credential_async(self):
- await self._refresh_credential_async()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.OIDC_ROLE_ARN
- )
- class CredentialsURICredential(Credential):
- """CredentialsURICredential"""
- def __init__(self, credentials_uri):
- self.access_key_id = None
- self.access_key_secret = None
- self.security_token = None
- self.expiration = None
- self.credentials_uri = credentials_uri
- self.credential_type = ac.CREDENTIALS_URI
- def _need_refresh(self):
- if self.expiration is None:
- return True
- return int(time.mktime(time.localtime())) >= (self.expiration - 180)
- def _ensure_credential(self):
- if self._need_refresh():
- self._get_new_credential()
- async def _ensure_credential_async(self):
- if self._need_refresh():
- await self._get_new_credential_async()
- def _get_new_credential(self):
- r = urlparse(self.credentials_uri)
- tea_request = ph.get_new_request()
- tea_request.headers['host'] = r.hostname
- tea_request.port = r.port
- tea_request.method = 'GET'
- tea_request.pathname = r.path
- for key, values in parse_qs(r.query).items():
- for value in values:
- tea_request.query[key] = value
- response = TeaCore.do_action(tea_request)
- if response.status_code != 200:
- raise CredentialException(
- "Get credentials from " + self.credentials_uri + " failed, HttpCode=" + str(response.status_code))
- body = response.body.decode('utf-8')
- dic = json.loads(body)
- content_code = dic.get('Code')
- content_access_key_id = dic.get('AccessKeyId')
- content_access_key_secret = dic.get('AccessKeySecret')
- content_security_token = dic.get('SecurityToken')
- content_expiration = dic.get('Expiration')
- if content_code != "Success":
- raise CredentialException(
- "Get credentials from " + self.credentials_uri + " failed, Code is " + content_code)
- # 先转换为时间数组
- time_array = time.strptime(content_expiration, "%Y-%m-%dT%H:%M:%SZ")
- # 转换为时间戳
- time_stamp = calendar.timegm(time_array)
- self.access_key_id = content_access_key_id
- self.access_key_secret = content_access_key_secret
- self.security_token = content_security_token
- self.expiration = time_stamp
- async def _get_new_credential_async(self):
- r = urlparse(self.credentials_uri)
- tea_request = ph.get_new_request()
- tea_request.headers['host'] = r.netloc
- tea_request.method = 'GET'
- tea_request.pathname = r.path
- tea_request.query = parse_qs(r.query)
- response = await TeaCore.async_do_action(tea_request)
- if response.status_code != 200:
- raise CredentialException(
- "Get credentials from " + self.credentials_uri + " failed, HttpCode=" + str(response.status_code))
- body = response.body.decode('utf-8')
- dic = json.loads(body)
- content_code = dic.get('Code')
- content_access_key_id = dic.get('AccessKeyId')
- content_access_key_secret = dic.get('AccessKeySecret')
- content_security_token = dic.get('SecurityToken')
- content_expiration = dic.get('Expiration')
- if content_code != "Success":
- raise CredentialException(
- "Get credentials from " + self.credentials_uri + " failed, Code is " + content_code)
- # 先转换为时间数组
- time_array = time.strptime(content_expiration, "%Y-%m-%dT%H:%M:%SZ")
- # 转换为时间戳
- time_stamp = calendar.timegm(time_array)
- self.access_key_id = content_access_key_id
- self.access_key_secret = content_access_key_secret
- self.security_token = content_security_token
- self.expiration = time_stamp
- def get_access_key_id(self):
- self._ensure_credential()
- return self.access_key_id
- def get_access_key_secret(self):
- self._ensure_credential()
- return self.access_key_secret
- def get_security_token(self):
- self._ensure_credential()
- return self.security_token
- async def get_access_key_id_async(self):
- await self._ensure_credential_async()
- return self.access_key_id
- async def get_access_key_secret_async(self):
- await self._ensure_credential_async()
- return self.access_key_secret
- async def get_security_token_async(self):
- await self._ensure_credential_async()
- return self.security_token
- def get_credential(self):
- self._ensure_credential()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.CREDENTIALS_URI
- )
- async def get_credential_async(self):
- await self._ensure_credential_async()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.CREDENTIALS_URI
- )
- class RsaKeyPairCredential(Credential, _AutomaticallyRefreshCredentials):
- def __init__(self, access_key_id, access_key_secret, expiration, provider):
- super().__init__(expiration, provider)
- self.access_key_id = access_key_id
- self.access_key_secret = access_key_secret
- self.credential_type = ac.RSA_KEY_PAIR
- def _refresh_credential(self):
- credential = super()._refresh_credential()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- async def _refresh_credential_async(self):
- credential = await super()._refresh_credential_async()
- if credential:
- self.access_key_id = credential.access_key_id
- self.access_key_secret = credential.access_key_secret
- self.expiration = credential.expiration
- self.security_token = credential.security_token
- def get_access_key_id(self):
- self._refresh_credential()
- return self.access_key_id
- def get_access_key_secret(self):
- self._refresh_credential()
- return self.access_key_secret
- async def get_access_key_id_async(self):
- await self._refresh_credential_async()
- return self.access_key_id
- async def get_access_key_secret_async(self):
- await self._refresh_credential_async()
- return self.access_key_secret
- def get_credential(self):
- self._refresh_credential()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- type=ac.RSA_KEY_PAIR
- )
- async def get_credential_async(self):
- await self._refresh_credential_async()
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- type=ac.RSA_KEY_PAIR
- )
- class StsCredential(Credential):
- def __init__(self, access_key_id, access_key_secret, security_token):
- self.access_key_id = access_key_id
- self.access_key_secret = access_key_secret
- self.security_token = security_token
- self.credential_type = ac.STS
- def get_access_key_id(self):
- return self.access_key_id
- def get_access_key_secret(self):
- return self.access_key_secret
- def get_security_token(self):
- return self.security_token
- async def get_access_key_id_async(self):
- return self.access_key_id
- async def get_access_key_secret_async(self):
- return self.access_key_secret
- async def get_security_token_async(self):
- return self.security_token
- def get_credential(self):
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.STS
- )
- async def get_credential_async(self):
- return CredentialModel(
- access_key_id=self.access_key_id,
- access_key_secret=self.access_key_secret,
- security_token=self.security_token,
- type=ac.STS
- )
|