| Server IP : 35.236.43.222 / Your IP : 216.73.216.143 Web Server : Apache System : Linux order-form-vm-001 5.10.0-37-cloud-amd64 #1 SMP Debian 5.10.247-1 (2025-12-11) x86_64 User : deploy ( 1002) PHP Version : 8.1.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /lib/python3/dist-packages/pysimplesoap/__pycache__/ |
Upload File : |
a
�/$Z|( � @ s� d Z ddlmZ ddlZejdkr*e ZZddlZddl m
Z
ddl Z ddl Z ddl
Z
ddlZddlmZmZmZmZ ddlmZ ddlZddlZdd l
mZ d
d � Zd Zd
ZdZ dZ dZ dZ G dd� d�Z G dd� de �Z!dZ"G dd� d�Z#dS )zFPythonic simple SOAP Client plugins for WebService Security extensions� )�unicode_literalsN�3)�Decimal� )�
__author__�
__copyright__� __license__� __version__)�SimpleXMLElement)�sha1c C s d� dd� t| �D ��S )N� c s s$ | ] }t �� �tjtj �V qd S �N)�randomZ SystemRandomZchoice�stringZascii_uppercaseZdigits)�.0�_� r �3/usr/lib/python3/dist-packages/pysimplesoap/wsse.py� <genexpr>$ � z randombytes.<locals>.<genexpr>)�join�range)�Nr r r � randombytes# s r zQhttp://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsdzRhttp://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsdz"http://www.w3.org/2000/09/xmldsig#zUhttp://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3z^http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binaryzahttp://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigestc @ s* e Zd ZdZd
dd�Zdd� Zdd� Zd S ) �
UsernameTokenzGWebService Security extension to add a basic credentials to xml requestr c C s d||d�i| _ d S )N�wsse:UsernameToken)�
wsse:Username�
wsse:Password)�token)�self�username�passwordr r r �__init__3 s
��zUsernameToken.__init__c
C sF |d|d�}d} | |v r"|| | _ |j| | j ddd� t|| �d< dS )z)Add basic credentials to outgoing message�Header��ns�
wsse:SecurityF)r% Zadd_children_ns�
xmlns:wsseN)r Zmarshall�WSSE_URI)
r �client�request�method�args�kwargs�headers�soap_uri�header�kr r r �
preprocess; s
zUsernameToken.preprocessc C s dS )z Analyze incoming credentialsNr )r r) �responser+ r, r- r. r/ r r r � postprocessH s zUsernameToken.postprocessN)r r )�__name__�
__module__� __qualname__�__doc__r" r2 r4 r r r r r 0 s
r c @ s" e Zd ZdZd dd�Zdd� ZdS )
�UsernameDigestTokenz�
WebService Security extension to add a http digest credentials to xml request
drift -> time difference from the server in seconds, needed for 'Created' header
r r c C s || _ || _tj|d�| _d S )N)Zseconds)r r! �datetimeZ timedelta�drift)r r r! r; r r r r" S s z UsernameDigestToken.__init__c C s� |d|d�}|j ddd�} t| d< t| d< | j ddd�}
|
j d| jdd� tj�� | j �� d } |
j d
| dd� td �} |
j d | � d
�d d� dd�}
t
|
d< t � }|� | | | j
� |�� }|
j d|� d
�d d� dd�}t|d< d S )Nr# r$ r& Fr' � xmlns:wsur r �Zz wsu:Created� z
wsse:Nonce�base64���� EncodingTyper �Type)Z add_childr( �WSU_URIr r: Zutcnowr; Z isoformatr �encode�Base64Binary_URIr �updater! �digest�PasswordDigest_URI)r r) r* r+ r, r- r. r/ r0 �wsseZ usertokenZcreatedZnonceZ wssenonceZsha1objrG r! r r r r2 X s z UsernameDigestToken.preprocessN)r r r )r5 r6 r7 r8 r" r2 r r r r r9 M s
r9 aZ <?xml version="1.0" encoding="UTF-8"?>
<wsse:Security soapenv:mustUnderstand="1" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="CertId-45851B081998E431E8132880700036719" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
%(certificate)s</wsse:BinarySecurityToken>
<ds:Signature Id="Signature-13" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
%(signed_info)s
<ds:SignatureValue>%(signature_value)s</ds:SignatureValue>
<ds:KeyInfo Id="KeyId-45851B081998E431E8132880700036720">
<wsse:SecurityTokenReference wsu:Id="STRId-45851B081998E431E8132880700036821" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Reference URI="#CertId-45851B081998E431E8132880700036719" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/>
</wsse:SecurityTokenReference>
</ds:KeyInfo>
</ds:Signature>
</wsse:Security>
c @ s4 e Zd ZdZd
dd�Zdd� Zdd � Zdd d �ZdS )�BinaryTokenSignaturezEWebService Security extension to add a basic signature to xml requestr Nc C s0 d� dd� t|�D ��| _|| _|| _|| _d S )Nr c S s g | ]}|� d �s|�qS )z---)�
startswith)r �liner r r �
<listcomp>� s
�z1BinaryTokenSignature.__init__.<locals>.<listcomp>)r �open� certificate� private_keyr! �cacert)r rO rP r! rQ r r r r" � s z BinaryTokenSignature.__init__c C s� |d|d�}|d|d�} d|d< t |d< |dd� D ]\}
} |
�d�r4| ||
< q4t|�} d d
lm}
|
�| d | j| j�}| j|d < t t
| �}| � |� dS )
z Sign the outgoing SOAP request�Bodyr$ r# zid-14�wsu:Idr< N�xmlnsr ��xmlsecz#id-14rO ) rC rK �reprr rV Zrsa_signrP r! rO r
�BIN_TOKEN_TMPLZ import_node)r r) r* r+ r, r- r. r/ �bodyr0 �attr�value�ref_xmlrV �varsrI r r r r2 � s
�
z BinaryTokenSignature.preprocessc C s� ddl m} |d|d�} |d|d�}
|
dtd�} | dtd�} | �| d t� | �| d t� t| ��d
�}
|j|
d d �}| j s�t
� d
� n|j | j |
d d �s�t
d��| �| d t� | d }| dtd�}|dtd�}|dtd�}| �|dtd�d d| � | �|dtd�d td � | �|dtd�dtd�d td � |d d � D ] \}}|�d ��rH|| |< �qH|�t| ��}|�|�}t|dtd�d td��}||k�r�t
d ��t|d < t|�}|�|t|�|�}|�s�t
d ��d S )!z-Verify the signature of the incoming responser rU rR r$ r# ZSecurityZBinarySecurityTokenrA Z ValueTyper? T)Zbinaryz/No CA provided, WSSE not validating certificatez"WSSE certificate validation failedr< rS Z SignatureZ
SignedInfoZSignatureValueZ ReferenceZURI�#ZSignatureMethodZ Algorithmzrsa-sha1Z DigestMethodr NrT Z DigestValuez WSSE SHA1 hash digests mismatchz+WSSE RSA-SHA1 signature verification failed)r rV r( � _BinaryTokenSignature__checkrE �
X509v3_URI�str�decodeZx509_extract_rsa_public_keyrQ �warnings�warnZ x509_verify� RuntimeErrorrC � XMLDSIG_URIrK Z canonicalizerW Zsha1_hash_digestZ
rsa_verify)r r) r3 r+ r, r- r. r/ rV rY r0 rI ZcertZcert_derZ
public_keyZref_uriZ signatureZ signed_infoZsignature_valuerZ r[ r\ Z
computed_hashZ digest_valueZxml�okr r r r4 � sL ��
z BinaryTokenSignature.postprocess�WSSE sanity check failedc C s ||krt |��d S r
)re )r r[ Zexpected�msgr r r Z__check� s z BinaryTokenSignature.__check)r r NN)rh )r5 r6 r7 r8 r" r2 r4 r_ r r r r rJ s
4rJ )$r8 Z
__future__r �sys�versionra Z
basestringZunicoder: Zdecimalr �osZloggingZhashlibrc r r r r r Z simplexmlr
r r r r r( rC rf r` rE rH r r9 rX rJ r r r r �<module>
s4
"