o e @s\ddlZddlZddlmZmZddlmZmZddZddZ dd Z Gd d d e Z dS) N)sha1sha256)urlparseparse_qscCs<t|t|kr dSd}t||D] \}}|||kM}q|S)zCompare two strings while protecting against timing attacks :param str string1: the first string :param str string2: the second string :returns: True if the strings are equal, False if not :rtype: :obj:`bool` FT)lenzip)string1string2resultc1c2r K/var/www/html/venv/lib/python3.10/site-packages/twilio/request_validator.pycompares  rcCs2|js|S|jdd}|j|d}|S)zRemove the port number from a URI :param uri: parsed URI that Twilio requested on your server :returns: full URI without a port number :rtype: str :rnetloc)portgeturlrsplit_replace)uri new_netlocnew_urir r r remove_ports  rcCsF|jr|S|jdkrdnd}|jdt|}|j|d}|S)zAdd the port number to a URI :param uri: parsed URI that Twilio requested on your server :returns: full URI with a port number :rtype: str httpsiPrr)rrschemerstrr)rrrrr r radd_port+s  rc@s,eZdZddZddZddZddZd S) RequestValidatorcCs|d|_dSNutf-8)encodetoken)selfr$r r r__init__?szRequestValidator.__init__cCs`|}|rt|D] \}}|||7}q t|j|dt}t| }| d}| S)zCompute the signature for a given request :param uri: full URI that Twilio requested on your server :param params: post vars that Twilio sent with the request :returns: The computed signature r") sorteditemshmacnewr$r#rbase64 b64encodedigestdecodestrip)r%rparamsskvmaccomputedr r rcompute_signatureBs z"RequestValidator.compute_signaturecCst|d}|Sr!)rr# hexdigestr/)r%bodyr5r r r compute_hashVszRequestValidator.compute_hashc Cs|duri}t|}t|}t|}d}d}d} t|j} d| vr4t|tr4t||| dd} i}t| |||}t| |||}| oK|pK|S)a]Validate a request from Twilio :param uri: full URI that Twilio requested on your server :param params: dictionary of POST variables or string of POST body for JSON requests :param signature: expected signature in HTTP X-Twilio-Signature header :returns: True if the request passes validation, False if not NFT bodySHA256r) rrrrquery isinstancerrr9r6) r%rr0 signature parsed_uri uri_with_porturi_without_portvalid_signaturevalid_signature_with_portvalid_body_hashr;r r rvalidate[s   zRequestValidator.validateN)__name__ __module__ __qualname__r&r6r9rDr r r rr =s  r ) r+r)hashlibrr urllib.parserrrrrobjectr r r r rs