a !f@s\ddlZddlZddlmZmZddlmZmZddZddZ dd Z Gd d d e Z dS) N)sha1sha256)urlparseparse_qscCs<t|t|krdSd}t||D]\}}|||kM}q"|S)zCompare two strings while protecting against timing attacks :param str string1: the first string :param str string2: the second string :returns: True if the strings are equal, False if not :rtype: :obj:`bool` FT)lenzip)Zstring1Zstring2resultc1c2r Y/var/www/html/python-backend/venv/lib/python3.9/site-packages/twilio/request_validator.pycompares r cCs2|js|S|jdd}|j|d}|S)zRemove the port number from a URI :param uri: parsed URI that Twilio requested on your server :returns: full URI without a port number :rtype: str :rnetloc)portgeturlrsplit_replace)uri new_netlocnew_urir r r remove_ports  rcCsF|jr|S|jdkrdnd}|jdt|}|j|d}|S)zAdd the port number to a URI :param uri: parsed URI that Twilio requested on your server :returns: full URI with a port number :rtype: str httpsiPrr)rrschemerstrr)rrrrr r r add_port+s  rc@s4eZdZddZddZddZddZd d Zd S) RequestValidatorcCs|d|_dSNutf-8)encodetoken)selfr"r r r __init__>szRequestValidator.__init__c Csz|}|rDtt|D].}|||}tt|D]}|||7}q0qt|j|dt}t | }| d}| S)zCompute the signature for a given request :param uri: full URI that Twilio requested on your server :param params: post vars that Twilio sent with the request :returns: The computed signature r ) sortedset get_valueshmacnewr"r!rbase64 b64encodedigestdecodestrip) r#rparamss param_namevaluesvaluemaccomputedr r r compute_signatureAs  z"RequestValidator.compute_signaturec CsVz ||WStyPz||WYStyJ||gYYS0Yn0dS)N)ZgetallAttributeErrorgetlist)r#Z param_dictr1r r r r'Xs   zRequestValidator.get_valuescCst|d}|Sr)rr! hexdigestr.)r#bodyr5r r r compute_hashdszRequestValidator.compute_hashc Cs|dur i}t|}t|}t|}d}t|j}d|vr`t|tr`t|||dd}i}t| |||} t| |||} |o| p| S)a]Validate a request from Twilio :param uri: full URI that Twilio requested on your server :param params: dictionary of POST variables or string of POST body for JSON requests :param signature: expected signature in HTTP X-Twilio-Signature header :returns: True if the request passes validation, False if not NTZ bodySHA256r) rrrrquery isinstancerr r;r6) r#rr/ signatureZ parsed_uriZ uri_with_portZuri_without_portZvalid_body_hashr<Zvalid_signatureZvalid_signature_with_portr r r validateis"    zRequestValidator.validateN)__name__ __module__ __qualname__r$r6r'r;r?r r r r r=s  r) r*r(hashlibrr urllib.parserrr rrobjectrr r r r s