o hJ @shddlZddlZddlmZmZddlmZmZddlm Z m Z m Z ddZ ddZ Gd d d eZdS) N)sha1sha256)PY3 string_types)izipurlparseparse_qscCs<t|t|kr dSd}t||D] \}}|||kM}q|S)zCompare two strings while protecting against timing attacks :param str string1: the first string :param str string2: the second string :returns: True if the strings are equal, False if not :rtype: :obj:`bool` FT)lenr)string1string2resultc1c2rJ/var/www/html/env/lib/python3.10/site-packages/twilio/request_validator.pycompare s  rcCs$|jdd}|j|d}|S)zRemove the port number from a URI :param uri: full URI that Twilio requested on your server :returns: full URI without a port number :rtype: str :r)netloc)rsplit_replacegeturl)uri new_netlocnew_urirrr remove_ports rc@s4eZdZddZefddZefddZddZd S) RequestValidatorcCs|d|_dSNutf-8)encodetoken)selfrrrr__init__*szRequestValidator.__init__c Csl|}t|dkrt|D] \}}|||7}qt|j|dt}t | }|r2| d}| S)a/Compute the signature for a given request :param uri: full URI that Twilio requested on your server :param params: post vars that Twilio sent with the request :param utf: whether return should be bytestring or unicode (python3) :returns: The computed signature rr) r sorteditemshmacnewrrrbase64 b64encodedigestdecodestrip) r rparamsutfskvmaccomputedrrrcompute_signature-s  z"RequestValidator.compute_signaturecCs.tt|d}|r|d}|Sr)r&r'rrr(r)r*)r bodyr,r1rrr compute_hashCs zRequestValidator.compute_hashcCs|duri}t|}|jdkr|jrt|}d}d}t|j}d|vr>t|tr>t| ||dd}t| |i|}n t| |||}|oJ|S)a]Validate a request from Twilio :param uri: full URI that Twilio requested on your server :param params: dictionary of POST variables or string of POST body for JSON requests :param signature: expected signature in HTTP X-Twilio-Signature header :returns: True if the request passes validation, False if not NhttpsFT bodySHA256r) rschemeportrrquery isinstancerrr4r2)r rr+ signature parsed_urivalid_signaturevalid_body_hashr9rrrvalidateKs  zRequestValidator.validateN)__name__ __module__ __qualname__r!rr2r4r?rrrrr(s    r)r&r$hashlibrrsixrr twilio.compatrrrrrobjectrrrrrs