mirror of
https://github.com/Tautulli/Tautulli.git
synced 2025-07-07 05:31:15 -07:00
47 lines
1.5 KiB
Python
47 lines
1.5 KiB
Python
import hashlib
|
|
import hmac
|
|
import re
|
|
import time
|
|
from binascii import a2b_hex
|
|
from cloudinary.compat import quote_plus
|
|
|
|
AUTH_TOKEN_NAME = "__cld_token__"
|
|
|
|
|
|
|
|
def generate(url=None, acl=None, start_time=None, duration=None, expiration=None, ip=None, key=None,
|
|
token_name=AUTH_TOKEN_NAME):
|
|
|
|
if expiration is None:
|
|
if duration is not None:
|
|
start = start_time if start_time is not None else int(time.mktime(time.gmtime()))
|
|
expiration = start + duration
|
|
else:
|
|
raise Exception("Must provide either expiration or duration")
|
|
|
|
token_parts = []
|
|
if ip is not None: token_parts.append("ip=" + ip)
|
|
if start_time is not None: token_parts.append("st=%d" % start_time)
|
|
token_parts.append("exp=%d" % expiration)
|
|
if acl is not None: token_parts.append("acl=%s" % _escape_to_lower(acl))
|
|
to_sign = list(token_parts)
|
|
if url is not None:
|
|
to_sign.append("url=%s" % _escape_to_lower(url))
|
|
auth = _digest("~".join(to_sign), key)
|
|
token_parts.append("hmac=%s" % auth)
|
|
return "%(token_name)s=%(token)s" % {"token_name": token_name, "token": "~".join(token_parts)}
|
|
|
|
|
|
def _digest(message, key):
|
|
bin_key = a2b_hex(key)
|
|
return hmac.new(bin_key, message.encode('utf-8'), hashlib.sha256).hexdigest()
|
|
|
|
|
|
def _escape_to_lower(url):
|
|
escaped_url = quote_plus(url)
|
|
|
|
def toLowercase(match):
|
|
return match.group(0).lower()
|
|
|
|
escaped_url = re.sub(r'%..', toLowercase, escaped_url)
|
|
return escaped_url
|