aws-sdk-euca 1.8.5

data/lib/aws/core/rest_response_parser.rb

@@ -0,0 +1,66 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  module Core
+
+    # Given a hash of request options, a REST::RequestHandler can
+    # populate a Core::Http::Request object.
+    class RESTResponseParser
+
+      # @private
+      def initialize operation, options
+        @http = operation[:http]
+        @parser =
+          case options[:format]
+          when :xml then XML::Parser.new(operation[:outputs])
+          when :json then Core::JSONParser.new(operation[:outputs])
+          else raise "unhandled format: #{options[:format].inspect}"
+          end
+      end
+
+      # Given a response object, this method extract and returns a
+      # hash of response data.
+      # @param [Response] response
+      # @return [Hash]
+      def extract_data response
+
+        if payload = @http[:response_payload]
+          data = { payload => response.http_response.body }
+        else
+          data = @parser.parse(response.http_response.body)
+        end
+
+        if header = response.http_response.headers['x-amzn-requestid']
+          data[:request_id] = [header].flatten.first
+        end
+
+        # extract headers and insert into response
+        (@http[:response_headers] || {}).each_pair do |name,header_name|
+          if header = response.http_response.headers[header_name.downcase]
+            data[name] = [header].flatten.first
+          end
+        end
+
+        data
+
+      end
+
+      def simulate
+        {}
+      end
+
+    end
+
+  end
+end

data/lib/aws/core/rest_xml_client.rb

@@ -0,0 +1,47 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  module Core
+    # @since 1.8.0
+    class RESTXMLClient < Core::Client
+
+      protected
+
+      def self.request_builder_for api_config, operation
+        RESTRequestBuilder.new(operation,
+          :format => :xml,
+          :xmlnamespace => api_config[:namespace])
+      end
+
+      def self.response_parser_for api_config, operation
+        RESTResponseParser.new(operation, :format => :xml)
+      end
+
+      def extract_error_details response
+        if
+          response.http_response.status >= 300 and
+          body = response.http_response.body and
+          error = errors_module::GRAMMAR.parse(body) and
+          error[:code]
+        then
+          [error[:code], error[:message]]
+        end
+      end
+
+    end
+
+    # @deprecated Use RESTXMLClient instead.
+    RESTClient = RESTXMLClient
+  end
+end

data/lib/aws/core/service_interface.rb

@@ -0,0 +1,61 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  module Core
+
+    module ServiceInterface
+
+      def self.included base
+
+        base.send(:attr_reader, :config)
+        base.send(:attr_reader, :client)
+
+        base.module_eval('module Errors; end')
+
+        unless base::Errors.include?(Errors)
+          base::Errors.module_eval { include Errors }
+        end
+
+      end
+
+      # Returns a new interface object for this service.  You can override
+      # any of the global configuration parameters by passing them in as
+      # hash options.  They are merged with AWS.config or merged
+      # with the provided +:config+ object.
+      #
+      #   @ec2 = AWS::EC2.new(:max_retries => 2)
+      #
+      # @see AWS::Cofiguration
+      #
+      # @param [Hash] options
+      #
+      # @option options [Configuration] :config An AWS::Configuration
+      #   object to initialize this service interface object with.  Defaults
+      #   to AWS.config when not provided.
+      #
+      def initialize options = {}
+        options = options.dup
+        @config = (options.delete(:config) || AWS.config)
+        @config = @config.with(options)
+        @client = @config.send(Inflection.ruby_name(self.class.name.split('::').last) + '_client')
+      end
+
+      # @return [String]
+      def inspect
+        "<#{self.class}>"
+      end
+
+    end
+  end
+end

data/lib/aws/core/signature/version_2.rb

@@ -0,0 +1,56 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  module Core
+    module Signature
+      module Version2
+
+        def add_authorization! credentials
+          add_param('AWSAccessKeyId', credentials.access_key_id)
+          if token = credentials.session_token
+            add_param("SecurityToken", token)
+          end
+          add_param('SignatureVersion', '2')
+          add_param('SignatureMethod', 'HmacSHA256')
+          add_param('Signature', signature(credentials))
+          self.body = url_encoded_params
+        end
+
+        protected
+
+        def signature credentials
+          Signer.sign(credentials.secret_access_key, string_to_sign)
+        end
+
+        def string_to_sign
+
+          host =
+            case port
+            when 80, 443 then self.host
+            else "#{self.host}:#{port}"
+            end
+
+          [
+            http_method,
+            host.to_s.downcase,
+            path,
+            params.sort.collect { |p| p.encoded }.join('&'),
+          ].join("\n")
+
+        end
+
+      end
+    end
+  end
+end

data/lib/aws/core/signature/version_3.rb

@@ -0,0 +1,77 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'openssl'
+require 'time'
+
+module AWS
+  module Core
+    module Signature
+      module Version3
+
+        def self.included base
+          base.send(:include, Signer)
+        end
+
+        def add_authorization! credentials
+
+          headers["x-amz-date"] ||= (headers["date"] ||= Time.now.httpdate)
+          headers["host"] ||= host
+
+          headers["x-amz-security-token"] = credentials.session_token if 
+            credentials.session_token
+
+          # compute the authorization
+          headers["x-amzn-authorization"] =
+            "AWS3 "+
+            "AWSAccessKeyId=#{credentials.access_key_id},"+
+            "Algorithm=HmacSHA256,"+
+            "SignedHeaders=#{headers_to_sign.join(';')},"+
+            "Signature=#{signature(credentials)}"
+        end
+
+        protected
+
+        def signature credentials
+          Signer.sign(credentials.secret_access_key, string_to_sign)  
+        end
+
+        def string_to_sign
+          OpenSSL::Digest::SHA256.digest([
+            http_method,
+            "/",
+            "",
+            canonical_headers,
+            body
+          ].join("\n"))
+        end
+
+        def canonical_headers
+          headers_to_sign.map do |name|
+            value = headers[name]
+            "#{name.downcase.strip}:#{value.strip}\n"
+          end.sort.join
+        end
+
+        def headers_to_sign
+          headers.keys.select do |header|
+              header == "host" ||
+              header == "content-encoding" ||
+              header =~ /^x-amz/
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/aws/core/signature/version_3_https.rb

@@ -0,0 +1,54 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'time'
+
+module AWS
+  module Core
+    module Signature
+      module Version3HTTPS
+
+        def self.included base
+          base.send(:include, Signer)
+        end
+
+        def add_authorization! credentials
+
+          self.access_key_id = credentials.access_key_id
+
+          parts = []
+          parts << "AWS3-HTTPS AWSAccessKeyId=#{access_key_id}"
+          parts << "Algorithm=HmacSHA256"
+          parts << "Signature=#{signature(credentials)}"
+          headers['x-amzn-authorization'] = parts.join(',')
+
+          headers['x-amz-security-token'] = credentials.session_token if
+            credentials.session_token
+
+        end
+
+        protected
+
+        def signature credentials
+          Signer.sign(credentials.secret_access_key, string_to_sign)
+        end
+
+        def string_to_sign
+          headers['date'] ||= Time.now.httpdate
+        end
+
+      end
+    end
+  end
+end
+

data/lib/aws/core/signature/version_4.rb

@@ -0,0 +1,135 @@
+# Copyright 2011-2013 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'time'
+require 'openssl'
+require 'digest'
+
+module AWS
+  module Core
+    module Signature
+      module Version4
+
+        def self.included base
+          base.send(:include, Signer)
+        end
+
+        def add_authorization! credentials
+          datetime = Time.now.utc.strftime("%Y%m%dT%H%M%SZ")
+          headers['content-type'] ||= 'application/x-www-form-urlencoded'
+          headers['host'] = host
+          headers['x-amz-date'] = datetime
+          headers['x-amz-security-token'] = credentials.session_token if
+            credentials.session_token
+          headers['x-amz-content-sha256'] ||= hexdigest(body || '')
+          headers['authorization'] = authorization(credentials, datetime)
+        end
+
+        protected
+
+        def authorization credentials, datetime
+          parts = []
+          parts << "AWS4-HMAC-SHA256 Credential=#{credentials.access_key_id}/#{credential_string(datetime)}"
+          parts << "SignedHeaders=#{signed_headers}"
+          parts << "Signature=#{signature(credentials, datetime)}"
+          parts.join(', ')
+        end
+
+        def signature credentials, datetime
+          k_secret = credentials.secret_access_key
+          k_date = hmac("AWS4" + k_secret, datetime[0,8])
+          k_region = hmac(k_date, region)
+          k_service = hmac(k_region, service)
+          k_credentials = hmac(k_service, 'aws4_request')
+          hexhmac(k_credentials, string_to_sign(datetime))
+        end
+
+        def string_to_sign datetime
+          parts = []
+          parts << 'AWS4-HMAC-SHA256'
+          parts << datetime
+          parts << credential_string(datetime)
+          parts << hexdigest(canonical_request)
+          parts.join("\n")
+        end
+
+        def credential_string datetime
+          parts = []
+          parts << datetime[0,8]
+          parts << region
+          parts << service
+          parts << 'aws4_request'
+          parts.join("/")
+        end
+
+        def canonical_request
+          parts = []
+          parts << http_method
+          parts << path
+          parts << querystring
+          parts << canonical_headers + "\n"
+          parts << signed_headers
+          parts << headers['x-amz-content-sha256']
+          parts.join("\n")
+        end
+
+        def service
+          # this method is implemented in the request class for each service
+          raise NotImplementedError
+        end
+
+        def signed_headers
+          to_sign = headers.keys.map{|k| k.to_s.downcase }
+          to_sign.delete('authorization')
+          to_sign.sort.join(";")
+        end
+
+        def canonical_headers
+          headers = []
+          self.headers.each_pair do |k,v|
+            headers << [k,v] unless k == 'authorization'
+          end
+          headers = headers.sort_by(&:first)
+          headers.map{|k,v| "#{k}:#{canonical_header_values(v)}" }.join("\n")
+        end
+
+        def canonical_header_values values
+          values = [values] unless values.is_a?(Array)
+          values.map(&:to_s).join(',').gsub(/\s+/, ' ').strip
+        end
+
+        def hexdigest value
+          digest = Digest::SHA256.new
+          if value.respond_to?(:read)
+            chunk = nil
+            chunk_size = 1024 * 1024 # 1 megabyte
+            digest.update(chunk) while chunk = value.read(chunk_size)
+            value.rewind
+          else
+            digest.update(value)
+          end
+          digest.hexdigest
+        end
+
+        def hmac key, value
+          OpenSSL::HMAC.digest(OpenSSL::Digest::Digest.new('sha256'), key, value)
+        end
+
+        def hexhmac key, value
+          OpenSSL::HMAC.hexdigest(OpenSSL::Digest::Digest.new('sha256'), key, value)
+        end
+
+      end
+    end
+  end
+end