aws_sdk 3.1.5

data/lib/aws/core/response_cache.rb

@@ -0,0 +1,50 @@
+# Copyright 2011-2012 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  module Core
+
+    # @private
+    class ResponseCache
+
+      attr_reader :cached_responses
+
+      attr_reader :resource_cache
+
+      def initialize
+        @cached_responses = []
+        @indexed_responses = {}
+        @resource_cache = ResourceCache.new
+      end
+
+      def add(resp)
+        cached_responses.unshift(resp)
+        @indexed_responses[resp.cache_key] = resp if
+          resp.respond_to?(:cache_key)
+        @resource_cache = ResourceCache.new
+      end
+
+      def select(*types, &block)
+        cached_responses.select do |resp|
+          types.map{|t| t.to_s }.include?(resp.request_type.to_s) and
+            (block.nil? || block.call(resp))
+        end
+      end
+
+      def cached(resp)
+        @indexed_responses[resp.cache_key]
+      end
+
+    end
+  end
+end

data/lib/aws/core/service_interface.rb

@@ -0,0 +1,61 @@
+# Copyright 2011-2012 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  module Core
+
+    module ServiceInterface
+
+      def self.included base
+
+        base.send(:attr_reader, :config)
+        base.send(:attr_reader, :client)
+
+        base.module_eval('module Errors; end')
+
+        unless base::Errors.include?(Errors)
+          base::Errors.module_eval { include Errors }
+        end
+
+      end
+
+      # Returns a new interface object for this service.  You can override
+      # any of the global configuration parameters by passing them in as
+      # hash options.  They are merged with AWS.config or merged
+      # with the provided +:config+ object.
+      #
+      #   @ec2 = AWS::EC2.new(:max_retries => 2)
+      #
+      # @see AWS::Cofiguration
+      #
+      # @param [Hash] options
+      #
+      # @option options [Configuration] :config An AWS::Configuration
+      #   object to initialize this service interface object with.  Defaults
+      #   to AWS.config when not provided.
+      #
+      def initialize options = {}
+        @config = options[:config]
+        @config ||= AWS.config
+        @config = @config.with(options)
+        @client = config.send(Inflection.ruby_name(self.class.to_s) + '_client')
+      end
+
+      # @return [String]
+      def inspect
+        "<#{self.class}>"
+      end
+
+    end
+  end
+end

data/lib/aws/core/session_signer.rb

@@ -0,0 +1,90 @@
+# Copyright 2011-2012 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'aws/sts'
+require 'thread'
+
+module AWS
+  module Core
+
+    # @private
+    class SessionSigner
+  
+      @create_mutex = Mutex.new
+  
+      def self.for config
+        @create_mutex.synchronize do
+          @session_signers ||= {}
+          @session_signers[config.signer.access_key_id] ||= self.new(config)
+        end
+      end
+  
+      def initialize config
+        @config = config
+        @session_mutex = Mutex.new
+      end
+  
+      def sign *args
+        short_term_signer.sign(*args)
+      end
+  
+      def access_key_id
+        session.credentials[:access_key_id]
+      end
+  
+      def secret_access_key
+        session.credentials[:secret_access_key]
+      end
+  
+      def session_token
+        session.credentials[:session_token]
+      end
+  
+      def refresh_session
+        sts = AWS::STS.new(:config => @config, :use_ssl => true)
+        @session_mutex.synchronize do
+          @session = sts.new_session
+        end
+      end
+
+      protected
+      def get_session
+        local_session = nil
+        @session_mutex.synchronize do
+          local_session =  @session
+        end
+        local_session
+      end
+  
+      protected
+      def session
+
+        session = get_session
+
+        if session.nil?
+          refresh_session 
+          session = get_session
+        end
+
+        session
+
+      end
+  
+      protected
+      def short_term_signer
+        DefaultSigner.new(access_key_id, secret_access_key, session_token)
+      end
+  
+    end
+  end
+end

data/lib/aws/core/signature/version_2.rb

@@ -0,0 +1,42 @@
+# Copyright 2011-2012 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+module AWS
+  module Core
+    module Signature
+      module Version2
+
+        def add_authorization! signer
+          self.access_key_id = signer.access_key_id
+          add_param('AWSAccessKeyId', access_key_id)
+          if signer.respond_to?(:session_token) and token = signer.session_token
+            add_param("SecurityToken", token)
+          end
+          add_param('SignatureVersion', '2')
+          add_param('SignatureMethod', 'HmacSHA256')
+          add_param('Signature', signer.sign(string_to_sign))
+        end
+
+        def string_to_sign
+          [
+            http_method,
+            host,
+            path,
+            params.sort.collect { |p| p.encoded }.join('&'),
+          ].join("\n")
+        end
+
+      end
+    end
+  end
+end

data/lib/aws/core/signature/version_3.rb

@@ -0,0 +1,73 @@
+# Copyright 2011-2012 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'openssl'
+require 'time'
+
+module AWS
+  module Core
+    module Signature
+      module Version3
+
+        def add_authorization!(signer)
+
+          self.access_key_id = signer.access_key_id
+
+          headers["x-amz-date"] ||= (headers["date"] ||= Time.now.rfc822)
+          headers["host"] ||= host
+
+          headers["x-amz-security-token"] = signer.session_token if 
+            signer.respond_to?(:session_token) and signer.session_token
+
+          # compute the authorization
+          request_hash = OpenSSL::Digest::SHA256.digest(string_to_sign)
+          signature = signer.sign(request_hash)
+          headers["x-amzn-authorization"] =
+            "AWS3 "+
+            "AWSAccessKeyId=#{signer.access_key_id},"+
+            "Algorithm=HmacSHA256,"+
+            "SignedHeaders=#{headers_to_sign.join(';')},"+
+            "Signature=#{signature}"
+        end
+
+        protected
+
+        def string_to_sign
+          [
+            http_method,
+            "/",
+            "",
+            canonical_headers,
+            body
+          ].join("\n")
+        end
+
+        def canonical_headers
+          headers_to_sign.map do |name|
+            value = headers[name]
+            "#{name.downcase.strip}:#{value.strip}\n"
+          end.sort.join
+        end
+
+        def headers_to_sign
+          headers.keys.select do |header|
+              header == "host" ||
+              header == "content-encoding" ||
+              header =~ /^x-amz/
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/aws/core/signature/version_3_http.rb

@@ -0,0 +1,72 @@
+# Copyright 2011-2012 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'openssl'
+require 'time'
+
+module AWS
+  module Core
+    module Signature
+      module Version3
+
+        def add_authorization!(signer)
+
+          self.access_key_id = signer.access_key_id
+
+          headers["x-amz-date"] ||= (headers["date"] ||= Time.now.rfc822)
+          headers["host"] ||= host
+
+          headers["x-amz-security-token"] = signer.session_token if 
+            signer.respond_to?(:session_token) and signer.session_token
+
+          # compute the authorization
+          request_hash = OpenSSL::Digest::SHA256.digest(string_to_sign)
+          signature = signer.sign(request_hash)
+          headers["x-amzn-authorization"] =
+            "AWS3 "+
+            "AWSAccessKeyId=#{signer.access_key_id},"+
+            "Algorithm=HmacSHA256,"+
+            "SignedHeaders=#{headers_to_sign.join(';')},"+
+            "Signature=#{signature}"
+        end
+
+        protected
+
+        def string_to_sign
+          [
+            http_method,
+            "/",
+            "",
+            canonical_headers,
+            body
+          ].join("\n")
+        end
+
+        def canonical_headers
+          headers_to_sign.map do |name|
+            value = headers[name]
+            "#{name.downcase.strip}:#{value.strip}\n"
+          end.sort.join
+        end
+
+        def headers_to_sign
+          headers.keys.select do |header|
+              header == "host" ||
+              header =~ /^x-amz/
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/aws/core/signature/version_4.rb

@@ -0,0 +1,138 @@
+# Copyright 2011-2012 Amazon.com, Inc. or its affiliates. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License"). You
+# may not use this file except in compliance with the License. A copy of
+# the License is located at
+#
+#     http://aws.amazon.com/apache2.0/
+#
+# or in the "license" file accompanying this file. This file is
+# distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF
+# ANY KIND, either express or implied. See the License for the specific
+# language governing permissions and limitations under the License.
+
+require 'time'
+require 'openssl'
+require 'digest'
+
+module AWS
+  module Core
+    module Signature
+      module Version4
+  
+        def add_authorization! signer
+          self.access_key_id = signer.access_key_id
+          datetime = Time.now.utc.strftime("%Y%m%dT%H%M%SZ")
+          headers['content-type'] ||= 'application/x-www-form-urlencoded'
+          headers['host'] = host
+          headers['x-amz-date'] = datetime
+          headers['x-amz-security-token'] = signer.session_token if signer.session_token
+          headers['authorization'] = authorization(signer, datetime)
+        end
+        
+        protected
+  
+        def authorization signer, datetime
+          parts = []
+          parts << "AWS4-HMAC-SHA256 Credential=#{access_key_id}/#{credential_string(datetime)}"
+          parts << "SignedHeaders=#{signed_headers}"
+          parts << "Signature=#{hex16(signature(signer, datetime))}"
+          parts.join(', ')
+        end
+  
+        def signature signer, datetime
+          k_secret = signer.secret_access_key
+          k_date = hmac("AWS4" + k_secret, datetime[0,8])
+          k_region = hmac(k_date, region)
+          k_service = hmac(k_region, service)
+          k_credentials = hmac(k_service, 'aws4_request')
+          hmac(k_credentials, string_to_sign(datetime))
+        end
+  
+        def string_to_sign datetime
+          parts = []
+          parts << 'AWS4-HMAC-SHA256'
+          parts << datetime
+          parts << credential_string(datetime)
+          parts << hex16(hash(canonical_request))
+          parts.join("\n")
+        end
+  
+        def credential_string datetime 
+          parts = []
+          parts << datetime[0,8]
+          parts << region
+          parts << service
+          parts << 'aws4_request'
+          parts.join("/")
+        end
+  
+        def canonical_request
+          parts = []
+          parts << action_name
+          parts << canonical_uri
+          parts << canonical_querystring
+          parts << canonical_headers + "\n"
+          parts << signed_headers
+          parts << hex16(hash(payload))
+          parts.join("\n")
+        end
+  
+        def service
+          # this method is implemented in the request class for each service
+          raise NotImplementedError
+        end
+  
+        def action_name
+          http_method.to_s.upcase
+        end
+  
+        def canonical_uri
+          path
+        end
+  
+        def payload
+          body || ''
+        end
+  
+        def canonical_querystring
+          http_method.to_s.upcase == 'GET' ? url_encoded_params : ''
+        end
+  
+        def signed_headers
+          to_sign = headers.keys.map{|k| k.to_s.downcase }
+          to_sign.delete('authorization')
+          to_sign.sort.join(";")
+        end
+  
+        def canonical_headers
+          headers = []
+          self.headers.each_pair do |k,v|
+            header = [k.to_s.downcase, v]
+            headers << header unless header.first == 'authorization'
+          end
+          headers = headers.sort_by(&:first)
+          headers.map{|k,v| "#{k}:#{canonical_header_values(v)}" }.join("\n")
+        end
+  
+        def canonical_header_values values
+          values = [values] unless values.is_a?(Array)
+          values.map(&:to_s).map(&:strip).join(',')
+        end
+  
+        def hex16 string
+          string.unpack('H*').first
+        end
+  
+        def hmac key, string
+          OpenSSL::HMAC.digest(OpenSSL::Digest::Digest.new('sha256'), key, string)
+        end
+  
+        def hash string
+          Digest::SHA256.digest(string)
+        end
+  
+      end
+    end
+  end
+end