| Server IP : 37.220.80.31 / Your IP : 18.222.119.177 Web Server : Apache/2.4.52 (Ubuntu) System : Linux 3051455-guretool.twc1.net 5.15.0-107-generic #117-Ubuntu SMP Fri Apr 26 12:26:49 UTC 2024 x86_64 User : www-root ( 1010) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /var/www/www-root/data/www/dev.artlot24.ru/bitrix/modules/clouds/classes/general/ |
Upload File : |
<?
IncludeModuleLangFile(__FILE__);
class CCloudSecurityService_AmazonS3
{
protected $status = 0;
protected $headers = array();
protected $error = false;
protected $result = '';
function GetLastRequestStatus()
{
return $this->status;
}
function GetObject()
{
return new CCloudSecurityService_AmazonS3();
}
function GetID()
{
return "amazon_sts";
}
function GetName()
{
return "AWS Security Token Service";
}
function GetDefaultBucketControlPolicy($bucket, $prefix)
{
return array(
'Statement' => array(
array(
'Effect' => 'Allow',
'Action' => array(
's3:DeleteObject',
's3:GetObject',
's3:PutObject',
's3:PutObjectAcl'
),
'Resource' => 'arn:aws:s3:::'.$bucket.'/'.$prefix.'/*',
),
array(
'Effect' => 'Allow',
'Action' => array(
's3:ListBucket'
),
'Resource' => 'arn:aws:s3:::'.$bucket,
'Condition' => array(
'StringLike' => array(
's3:prefix' => $prefix."/*"
),
),
),
),
);
}
function GetFederationToken($arBucket, $Policy, $Name, $DurationSeconds = 129600/*36h*/)
{
global $APPLICATION;
$response = $this->SendRequest(
$arBucket["SETTINGS"]["ACCESS_KEY"],
$arBucket["SETTINGS"]["SECRET_KEY"],
'GET',
$arBucket["BUCKET"],
'/',
array(
'Action' => "GetFederationToken",
'DurationSeconds' => intval($DurationSeconds),
'Name' => $Name,
'Policy' => $this->PHPToJSObject($Policy),
)
);
if(
is_array($response)
&& isset($response["GetFederationTokenResponse"])
&& is_array($response["GetFederationTokenResponse"])
&& isset($response["GetFederationTokenResponse"]["#"])
&& is_array($response["GetFederationTokenResponse"]["#"])
&& isset($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"])
&& is_array($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"])
&& isset($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"][0])
&& is_array($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"][0])
&& isset($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"][0]["#"])
&& is_array($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"][0]["#"])
&& isset($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"][0]["#"]["Credentials"])
&& is_array($response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"][0]["#"]["Credentials"])
)
{
$Credentials = $response["GetFederationTokenResponse"]["#"]["GetFederationTokenResult"][0]["#"]["Credentials"];
if(
isset($Credentials[0])
&& is_array($Credentials[0])
&& isset($Credentials[0]["#"])
&& is_array($Credentials[0]["#"])
&& isset($Credentials[0]["#"]["SessionToken"])
&& is_array($Credentials[0]["#"]["SessionToken"])
&& isset($Credentials[0]["#"]["SessionToken"][0])
&& is_array($Credentials[0]["#"]["SessionToken"][0])
&& isset($Credentials[0]["#"]["SessionToken"][0]["#"])
)
$SessionToken = $Credentials[0]["#"]["SessionToken"][0]["#"];
else
{
return 1;
}
if(
isset($Credentials[0])
&& is_array($Credentials[0])
&& isset($Credentials[0]["#"])
&& is_array($Credentials[0]["#"])
&& isset($Credentials[0]["#"]["SecretAccessKey"])
&& is_array($Credentials[0]["#"]["SecretAccessKey"])
&& isset($Credentials[0]["#"]["SecretAccessKey"][0])
&& is_array($Credentials[0]["#"]["SecretAccessKey"][0])
&& isset($Credentials[0]["#"]["SecretAccessKey"][0]["#"])
)
$SecretAccessKey = $Credentials[0]["#"]["SecretAccessKey"][0]["#"];
else
{
return 2;
}
if(
isset($Credentials[0])
&& is_array($Credentials[0])
&& isset($Credentials[0]["#"])
&& is_array($Credentials[0]["#"])
&& isset($Credentials[0]["#"]["AccessKeyId"])
&& is_array($Credentials[0]["#"]["AccessKeyId"])
&& isset($Credentials[0]["#"]["AccessKeyId"][0])
&& is_array($Credentials[0]["#"]["AccessKeyId"][0])
&& isset($Credentials[0]["#"]["AccessKeyId"][0]["#"])
)
$AccessKeyId = $Credentials[0]["#"]["AccessKeyId"][0]["#"];
else
{
return 3;
}
return array(
"ACCESS_KEY" => $AccessKeyId,
"SECRET_KEY" => $SecretAccessKey,
"SESSION_TOKEN" => $SessionToken,
);
}
else
{
return false;
}
}
function SendRequest($access_key, $secret_key, $verb, $bucket, $file_name='/', $params='')
{
global $APPLICATION;
$this->status = 0;
$params['SignatureVersion'] = 2;
$params['SignatureMethod'] = 'HmacSHA1';
$params['AWSAccessKeyId'] = $access_key;
$params['Version'] = '2011-06-15';
$retry_count = COption::GetOptionInt("clouds", "aws_security_service_retry_count");
$retry_timeout = COption::GetOptionInt("clouds", "aws_security_service_retry_timeout");
while (true)
{
$time = time();
$params['Timestamp'] = gmdate('Y-m-d', $time).'T'.gmdate('H:i:s', $time);
$RequestMethod = $verb;
$RequestHost = "sts.amazonaws.com";
$RequestURI = "/";
$RequestParams = "";
ksort($params);
foreach($params as $name => $value)
{
if($RequestParams != '')
$RequestParams .= '&';
$RequestParams .= urlencode($name)."=".urlencode($value);
}
$StringToSign = "$RequestMethod\n"
."$RequestHost\n"
."$RequestURI\n"
."$RequestParams"
;
$Signature = urlencode(base64_encode($this->hmacsha1($StringToSign, $secret_key)));
$request = new Bitrix\Main\Web\HttpClient();
$is_ok = $request->query($RequestMethod, "https://$RequestHost$RequestURI?$RequestParams&Signature=$Signature");
if (!$is_ok && $retry_count > 0)
{
$retry_count--;
sleep($retry_timeout);
continue;
}
break;
}
$this->result = $request->getResult();
$this->status = $request->getStatus();
$this->headers = $request->getHeaders();
$this->error = $request->getError();
if($this->status == 200)
{
if($this->result)
{
$obXML = new CDataXML;
$text = preg_replace("/<"."\\?XML.*?\\?".">/i", "", $this->result);
if($obXML->LoadString($text))
{
$arXML = $obXML->GetArray();
if(is_array($arXML))
{
return $arXML;
}
}
//XML parse error
$APPLICATION->ThrowException(GetMessage('CLO_SECSERV_S3_XML_PARSE_ERROR', array('#errno#'=>1)));
return false;
}
else
{
//Empty success result
return array();
}
}
elseif($this->status > 0)
{
if($this->result)
{
$APPLICATION->ThrowException(GetMessage('CLO_SECSERV_S3_XML_ERROR', array('#errmsg#'=>$this->result)));
return false;
}
$APPLICATION->ThrowException(GetMessage('CLO_SECSERV_S3_XML_PARSE_ERROR', array('#errno#'=>2)));
return false;
}
else
{
$APPLICATION->ThrowException(GetMessage('CLO_SECSERV_S3_XML_PARSE_ERROR', array('#errno#'=>3)));
return false;
}
}
function hmacsha1($data, $key)
{
if(mb_strlen($key) > 64)
$key=pack('H*', sha1($key));
$key = str_pad($key, 64, chr(0x00));
$ipad = str_repeat(chr(0x36), 64);
$opad = str_repeat(chr(0x5c), 64);
$hmac = pack('H*', sha1(($key^$opad).pack('H*', sha1(($key^$ipad).$data))));
return $hmac;
}
function PhpToJSObject($arData, $bWS = false, $bSkipTilda = false)
{
static $aSearch = array("\r", "\n");
if(is_array($arData))
{
if($arData == array_values($arData))
{
foreach($arData as $key => $value)
{
if(is_array($value))
{
$arData[$key] = $this->PhpToJSObject($value, $bWS, $bSkipTilda);
}
elseif(is_bool($value))
{
if($value === true)
$arData[$key] = 'true';
else
$arData[$key] = 'false';
}
else
{
if(preg_match("#['\"\\n\\r<\\\\]#", $value))
$arData[$key] = '"'.CUtil::JSEscape($value).'"';
else
$arData[$key] = '"'.$value.'"';
}
}
return '['.implode(',', $arData).']';
}
$sWS = ','.($bWS ? "\n" : '');
$res = ($bWS ? "\n" : '').'{';
$first = true;
foreach($arData as $key => $value)
{
if ($bSkipTilda && mb_substr($key, 0, 1) == '~')
continue;
if($first)
$first = false;
else
$res .= $sWS;
if(preg_match("#['\"\\n\\r<\\\\]#", $key))
$res .= '"'.str_replace($aSearch, '', CUtil::JSEscape($key)).'":';
else
$res .= '"'.$key.'":';
if(is_array($value))
{
$res .= $this->PhpToJSObject($value, $bWS, $bSkipTilda);
}
elseif(is_bool($value))
{
if($value === true)
$res .= 'true';
else
$res .= 'false';
}
else
{
if(preg_match("#['\"\\n\\r<\\\\]#", $value))
$res .= '"'.CUtil::JSEscape($value).'"';
else
$res .= '"'.$value.'"';
}
}
$res .= ($bWS ? "\n" : '').'}';
return $res;
}
elseif(is_bool($arData))
{
if($arData === true)
return 'true';
else
return 'false';
}
else
{
if(preg_match("#['\"\\n\\r<\\\\]#", $arData))
return '"'.CUtil::JSEscape($arData).'"';
else
return '"'.$arData.'"';
}
}
}
?>