o
:F¶d¸6 ã @ s| d dl mZ d dlmZ d dlmZ d dlmZmZmZ d dlm Z d dl
Z
d dl Z d dl Z d dl
m mZ d dlZd dlmZ d dlZd dlZd dlZd dlZd dlmZ d dlmZmZmZ d d l m Z m Z d
Z d Z d Z!ej"j#d
dj$e dde j%ddde j%dddej&e j'ej(dd„ ƒƒƒƒƒƒZ)d%dd„Z*d&dd „Z+G d d „ d e ƒZ,G d d „ d e ƒZ-G d!d"„ d"e.ƒZ/d#d$„ Z0dS )'é )Úprint_function)Ú cli_setup)Úcli_util)ÚDEFAULT_KEY_NAMEÚPUBLIC_KEY_FILENAME_SUFFIXÚPRIVATE_KEY_FILENAME_SUFFIX)Úprompt_for_passphraseN)Úidentity)ÚurlparseÚparse_qsÚ urlencode)ÚBaseHTTPRequestHandlerÚ
HTTPServeriõ zBootstrap process canceled.z2https://login.{region}.{realm}/v1/oauth2/authorizeÚ bootstrapa/
Provides an interactive process to create a CLI config file using username / password based login through a browser.
Also handles generating API keys and uploading them to your Oracle Cloud Infrastructure account.
Note that port {port} must be available in order for this command to complete properly.©Úport)Úhelpz--profile-namez$Name of the profile you are creatingz--config-locationz&Path to the config for the new profilec C s | j d r
| j d nd}t|d}|j}|j}|j}|j}|j} |j}
|j} t j
j ||¡} t
jd|i| d}
|
| ¡}|jD ]
}|jrI|j} nq?t
jd|i| d}
t
j ¡ }tj|d d¡|_z|
|
|¡}W nr t jjyÜ } zd|j dkrÐ|j dkrÐ|
|
¡}t d ¡ t d
¡ d }|jD ]}t d j!||j|j"d
t#j$¡ |d 7 }q’t j%ddd}|s»t t&¡ t# 'd¡ |
(|
|¡ t d !|¡¡ |
|
|¡ n|‚W Y d }~nd }~ww t d !| ¡¡ |rít)j* +|¡nd }t,|||ddd\}}t d !|¡¡ t dj!||d¡ d S )NÚregionÚ )r )Úsigner)Ú
public_keyúUTF-8i™ ZApiKeyLimitExceededz4ApiKey limit has been reached for this user account.z>The following API keys are currently enabled for this account:é zH Key [{index}]: Fingerprint: {fingerprint}, Time Created: {time_created})ÚindexÚ fingerprintÚ time_createdz|Enter the fingerprint of the API key to delete to make space for the new key (leave empty to skip deletion and exit command)T)ÚtextZconfirmation_promptr z$Deleted Api key with fingerprint: {}z)Uploaded new API key with fingerprint: {}F)Ú profile_nameÚconfigÚ
persist_tokenr zConfig written to: {}zœ
Try out your newly registered credentials with the following example command:
oci iam region list --config-file {config_file} --profile {profile}
)Ú config_fileZprofile)-ÚobjÚcreate_user_sessionr Ú private_keyr ÚtokenÚ tenancy_ocidÚ user_ocidr ÚociZauthZsignersZSecurityTokenSignerr ZIdentityClientZlist_region_subscriptionsÚdataZis_home_regionZ region_nameZmodelsZCreateApiKeyDetailsr Z
serialize_keyÚdecodeÚkeyZupload_api_keyÚ
exceptionsZ ServiceErrorÚstatusÚcodeZ
list_api_keysÚclickÚechoÚformatr ÚsysÚstderrÚpromptÚ"BOOTSTRAP_PROCESS_CANCELED_MESSAGEÚexitZdelete_api_keyÚosÚpathÚ
expanduserÚpersist_user_session)Úctxr Úconfig_locationZ region_paramÚ user_sessionr r# r r$ r% r& r r ZclientÚresultÚrZ home_regionZcreate_api_key_detailsÚeÚcountZdelete_thumbprintZ
config_loc© rA ú?usr/lib/python3.10/site-packages/oci_cli/cli_setup_bootstrap.pyÚbootstrap_oci_cli sn
þ
ýü
þ€ê ürC r c
C s | dkrt ¡ } z dtf}t|tƒ}W n" ty5 } z|jtjkr/t dj
td¡ t d¡ |‚d }~ww t
¡ }| ¡ }t |¡}t
|¡}|} | d¡}
t |
¡ d¡} | } dddt ¡ d | d
t¡d œ}
|rn||
d < | tjv rxtj| } t | ¡r‹tj
| tj tj | d
}nt d
| tj ¡¡ t d¡ t |
ƒ}dj
||d}z%t !|¡r½t d¡ t d¡ t d| ¡ n t d¡ t d| ¡ W n# t j"yí } zt dj
t#|ƒd¡ t d¡ W Y d }~nd }~ww | $¡ }t d¡ t%j|dd}|d }|d }t&||| ||||ƒS )Nr zKCould not complete bootstrap process because port {port} is already in use.r r r ZloginZ iaas_consoleztoken id_tokenZopenidzhttp://localhost:{})ÚactionZ client_idZ
response_typeZnonceÚscoper Z redirect_uriZtenant)r Úrealmz6Error: {} is not a valid region. Valid regions are
{}z!{console_auth_url}?{query_string})Zconsole_auth_urlÚ query_stringz; Please switch to newly opened browser window to log in!zL You can also open the following URL in a web browser window to continue:z%sz? Open the following URL in a web browser window to continue:zeCould not launch web browser to complete login process, exiting bootstrap command. Error: {exc_info}.)Úexc_infoz- Completed browser authentication process!F)ZverifyÚsub)'r Zprompt_for_regionÚBOOTSTRAP_SERVICE_PORTÚStoppableHttpServerÚStoppableHttpRequestHandlerÚOSErrorÚerrnoZ
EADDRINUSEr. r/ r0 r1 r5 r Z generate_keyr Zpublic_key_to_fingerprintZto_jwkÚencodeÚbase64Úurlsafe_b64encoder) ÚuuidZuuid4ÚregionsZREGIONS_SHORT_NAMESZ is_regionÚCONSOLE_AUTH_URL_FORMATZREALMSZ
REGION_REALMSZREGIONSr Ú
webbrowserZopen_newÚErrorÚstrÚ
serve_foreverÚjwtÚ UserSession)r Z tenancy_nameZserver_addressZhttpdr? r# r r r* Z jwk_contentZbytes_jwk_contentZb64_jwk_contentZpublic_key_jwkÚqueryZ console_urlrG Úurlr$ Z
token_datar& r% rA rA rB r" q s„ ÿ
€ø
ù
ÿ
þ
€ÿ€ü
r" Fc C s¾ |st ¡ \}}|r
|}nt j}|s t t¡ t d¡ tj
tj t j |¡¡} tj
| ¡s3t | ¡ tj | tt ¡}
|sGtj | tt ¡} t |
| jdd¡sZt t¡ t d¡ d } |sb|re|retƒ } |s{t | | j| dd¡s{t t¡ t d¡ |r¤tj | d¡}
t|
dƒ}| | j¡ W d ƒ n1 sšw Y t |
¡ t ||¡ d }|r±| j }|r¾| r¾tj ddds¾d } t j ||| j |sÌtj
| ¡nd| j!| j"| ||r×|
nd d ||fS )
Nr Tr$ Úwz‹Do you want to write your passphrase to the config file? (If not, you will need to enter it when prompted each time you run an oci command)F)ÚdefaultZUpdate_private_key_path) ÚfilenameZuser_idr Zkey_fileZtenancyr Z pass_phraser Úsecurity_token_file)#r Zprompt_session_for_profileZDEFAULT_CONFIG_LOCATIONr. r/ r4 r1 r5 r6 r7 ÚabspathÚjoinZDEFAULT_TOKEN_DIRECTORYÚexistsr Zcreate_directoryr r r Zwrite_public_key_to_filer r Zwrite_private_key_to_filer# ÚopenÚwriter$ Z"apply_user_only_access_permissionsZremove_profile_from_configr& ZconfirmZ write_configr r% r )r< r r Zuse_passphraser r Z session_authZpersist_only_public_keyr; Zsession_auth_locationZpublic_key_file_pathZprivate_key_file_pathZkey_passphraseZtoken_locationr` ZuserIdrA rA rB r9 É s`
ÿ
÷ r9 c @ s e Zd ZdZdd„ Zdd„ ZdS )rL z5http request handler with abilitiy to stop the serverc G s d S ©NrA )Úselfr0 ÚargsrA rA rB Ú log_message s z'StoppableHttpRequestHandler.log_messagec C s– | d¡ | ¡ | jdkr-d}z | j |¡ W dS ty, | j t|dƒ¡ Y dS w tt| jƒj ƒ}d|v rI|d d }|| j
_ d| j
_ dS dS ) z1send 200 OK response, and set server.stop to TrueéÈ ú/a
r Úsecurity_tokenr TN)
Z
send_responseZ end_headersr7 Zwfilere Ú TypeErrorÚbytesr r
r[ ÚserverÚ ret_valueÚstop)rg Z
javascriptZquery_componentsrl rA rA rB Údo_GET s
ÿ ýz"StoppableHttpRequestHandler.do_GETN)Ú__name__Ú
__module__Ú __qualname__Ú__doc__ri rr rA rA rA rB rL s rL c @ s e Zd ZdZdd„ ZdS )rK z)http server that reacts to self.stop flagc C s. d| _ d| _| j s| ¡ | j r | ¡ | jS )z+Handle one request at a time until stopped.FN)rq rp Zhandle_requestZ server_close)rg rA rA rB rX = s ÿz!StoppableHttpServer.serve_foreverN)rs rt ru rv rX rA rA rA rB rK : s rK c @ s e Zd Zdd„ ZdS )rZ c C s. || _ || _|| _|| _|| _|| _|| _d S rf )r& r% r r$ r r# r )rg r& r% r r$ r r# r rA rA rB Ú__init__L s
zUserSession.__init__N)rs rt ru rw rA rA rA rB rZ K s rZ c C s< t j | ¡}t j |¡rt d¡‚t j |¡r t d¡‚|S )Nz6Token file location must be a filename not a directoryz(Token file location cannot already exist)r6 r7 r8 Úisdirr. Z BadParameterrc )r_ Zfilename_expandedrA rA rB Úprocess_security_tokennameV s
ry )r N)NNFFFFF)1Ú
__future__r Úoci_clir r Zoci_cli.cli_setupr r r r rP r. rN Zoci._vendor.jwtÚ_vendorrY r' Z oci.regionsrS r6 r1 rR rU r Ú urllib.parser
r r Z http.serverr
r rJ r4 rT Z setup_groupÚcommandr0 ÚoptionÚ help_optionZ pass_contextZwrap_exceptionsrC r" r9 rL rK ÚobjectrZ ry rA rA rA rB Ú sH
ü
G
XB/