/usr/lib/python2.6/site-packages/keystoneclient/middleware
Edit: /usr/lib/python2.6/site-packages/keystoneclient/middleware/s3_token.pyc (8720B)
Ñò
`_.
This WSGI component:
* Get a request from the swift3 middleware with an S3 Authorization
access key.
* Validate s3 token in Keystone.
* Transform the account name to AUTH_%(tenant_name).
iÿÿÿÿN( t jsonutils( t strutils( t urllibs S3 Token Authenticationi c C s¬ | p
| } n | | j o t d | | f ƒ ‚ n | o | i d | ƒ } | d 7} | d 7} t | ƒ } | d p. | | j p! | | j p d | d | !j o t d t i i | ƒ ƒ ‚ qyn¬ | d 7} | d 7} | i d | ƒ } t | ƒ } | d pN | | j pA | | d j p0 d | d | !j p | | d j o+ | | o t d t i i | ƒ ƒ ‚ n | d | !} | i d g | d t | ƒ ƒ | S( s! Validate and split the given HTTP request path.
**Examples**::
['a'] = split_path('/a')
['a', None] = split_path('/a', 1, 2)
['a', 'c'] = split_path('/a/c', 1, 2)
['a', 'c', 'o/r'] = split_path('/a/c/o/r', 1, 3, True)
:param path: HTTP Request path to be split
:param minsegs: Minimum number of segments to be extracted
:param maxsegs: Maximum number of segments to be extracted
:param rest_with_last: If True, trailing data will be returned as part
of last segment. If False, and there is
trailing data, raises ValueError.
:returns: list of segments with a length of maxsegs (non-existent
segments will return as None)
:raises: ValueError if given an invalid path
s minsegs > maxsegs: %d > %dt /i i t s Invalid path: %sN( t
ValueErrort splitt lenR t parset quotet extendt None( t patht minsegst maxsegst rest_with_lastt segst count( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt
split_path6 s.
%$
)
"t ServiceErrorc B s e Z RS( ( t __name__t
__module__( ( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyR d s t S3Tokenc B s2 e Z d Z d „ Z d „ Z d „ Z d „ Z RS( s< Auth Middleware that handles S3 authenticating client calls.c C s= | | _ t i | i d t ƒ ƒ | _ | i i d t ƒ | i i d ƒ | i d d ƒ | _ | i d ƒ } t
| i d d ƒ ƒ } | i d d
ƒ } d | | | f | _ t i
| i d t ƒ ƒ } | i d
ƒ } | i d ƒ } | o
t | _ n? | o | o | | f | _ n | o
| | _ n
d | _ d S( s Common initialization code.t log_names Starting the %s components¦ This middleware module is deprecated as of v0.11.0 in favor of keystonemiddleware.s3_token - please update your WSGI pipeline to reference the new middleware package.t reseller_prefixt AUTH_t auth_hostt auth_porti Š t
auth_protocolt httpss
%s://%s:%st insecuret certfilet keyfileN( t appt loggingt getLoggert getR t loggert debugt
PROTOCOL_NAMEt warningR t intt request_uriR t bool_from_stringt Falset verifyR ( t selfR! t confR R R R t cert_filet key_file( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt __init__k s(
c C sv h d d 6d
d 6} t i d d ƒ } | | d | _ d
| | | d f } t i o | i ƒ } n | | _ | S( Ni‘ s
Access deniedt AccessDeniedi s! Could not parse the specified URIt
InvalidURIt content_types text/xmli sg
%s
%s
i ( i‘ s
Access denied( i s! Could not parse the specified URI( t webobt Responset statust sixt PY3t encodet body( R. t codet error_tablet respt error_msg( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt deny_request‹ s
c C sç h d d 6} y/ t i d | i d | d | d | i ƒ} WnI t i i j
o7 } | i i d | ƒ | i d ƒ } t | ƒ ‚ n X| i
d j p | i
d
j o; | i i d | i
| i ƒ | i d ƒ } t | ƒ ‚ n | S(
Ns application/jsons Content-Types %s/v2.0/s3tokenst headerst dataR- s HTTP connection exception: %sR4 iÈ i, s) Keystone reply error: status=%s reason=%sR3 (
t requestst postR* R- t
exceptionst RequestExceptionR% t infoRA R t status_codeR& t reason( R. t
creds_jsonRB t responset eR? ( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt
_json_request› s
c C sg t i | ƒ } | i i d ƒ y. t | i d d t ƒ } | \ } } } } Wn6 t j
o* d } | i i | ƒ | i | | ƒ SXd | i j o' d } | i i | ƒ | i | | ƒ S| i i
d | i i
d ƒ ƒ }
|
p' d } | i i | ƒ | i | | ƒ S| i d } y) | i d
ƒ d i d d ƒ \ } }
Wn? t j
o3 d
} | i i | | ƒ | i
d ƒ | | ƒ SXd } d | j o | i d ƒ \ } } n h h | d 6|
d 6|
d 6d 6} t i | ƒ } | i i d | ƒ y | i | ƒ } WnH t j
o< } | i d } d } | i i | | i ƒ | | | ƒ SX| i i d | i | i ƒ y: | i ƒ } t | d d d ƒ } | d d d } WnN t t f j
o< d } | i i | | i | i ƒ | i
d ƒ | | ƒ SX| | i d <| p | d } | i i d | ƒ d | i | f } | d i | | ƒ | d <| i | | ƒ S( s: Handle incoming request. authenticate and send downstream.s Calling S3Token middleware.i i s Not a path query, skipping.t
Authorizations" No Authorization header. skipping.s X-Auth-Tokens X-Storage-Tokens9 You did not specify an auth or a storage token. skipping.t iÿÿÿÿt :s, You have an invalid Authorization header: %sR4 t accesst tokent signaturet credentialss, Connecting to Keystone sending this JSON: %si s1 Received error, exiting middleware with error: %ss& Keystone Reply: Status: %d, Output: %st idt tenants Error on keystone reply: %d %ss Connecting with tenant: %ss %s%st PATH_INFON( R6 t RequestR% R& R R t TrueR R! RB R$ R t rsplitRA R R t dumpsRN R t argsRI t contentt jsont strt KeyErrorR t replace( R. t environt start_responset reqt partst versiont accountt containert objt msgRS t auth_headerRR RT t force_tenantt credsRK R? RM t
identity_infot token_idRW t errort tenant_to_connectt new_tenant_name( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt __call__® sv
)
( R R t __doc__R2 RA RN Rt ( ( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyR h s
c s, | i ƒ ‰ ˆ i | ƒ ‡ f d † } | S( s4 Returns a WSGI filter app for use with paste.deploy.c s
t | ˆ ƒ S( N( R ( R! ( R/ ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt auth_filter s ( t copyt update( t global_conft
local_confRv ( ( R/ sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt filter_factory s
( Ru R" t oslo_serializationR t
oslo_utilsR RD R9 t six.movesR R6 R' R R, R t ExceptionR t objectR R{ ( ( ( sQ /tmp/pip-build-cD3xZi/python-keystoneclient/keystoneclient/middleware/s3_token.pyt
& s .£