""" Implement the ``tahoe put`` command. """ from __future__ import annotations from io import BytesIO from urllib.parse import quote as url_quote from base64 import urlsafe_b64encode from cryptography.hazmat.primitives.serialization import load_pem_private_key from twisted.python.filepath import FilePath from allmydata.crypto.rsa import PrivateKey, der_string_from_signing_key from allmydata.scripts.common_http import do_http, format_http_success, format_http_error from allmydata.scripts.common import get_alias, DEFAULT_ALIAS, escape_path, \ UnknownAliasError from allmydata.util.encodingutil import quote_output def load_private_key(path: str) -> str: """ Load a private key from a file and return it in a format appropriate to include in the HTTP request. """ privkey = load_pem_private_key(FilePath(path).getContent(), password=None) assert isinstance(privkey, PrivateKey) derbytes = der_string_from_signing_key(privkey) return urlsafe_b64encode(derbytes).decode("ascii") def put(options): """ @param verbosity: 0, 1, or 2, meaning quiet, verbose, or very verbose @return: a Deferred which eventually fires with the exit code """ nodeurl = options['node-url'] aliases = options.aliases from_file = options.from_file to_file = options.to_file mutable = options['mutable'] if options["private-key-path"] is None: private_key = None else: private_key = load_private_key(options["private-key-path"]) format = options['format'] if options['quiet']: verbosity = 0 else: verbosity = 2 stdin = options.stdin stdout = options.stdout stderr = options.stderr if nodeurl[-1] != "/": nodeurl += "/" if to_file: # several possibilities for the TO_FILE argument. # : unlinked upload # foo : TAHOE_ALIAS/foo # subdir/foo : TAHOE_ALIAS/subdir/foo # /oops/subdir/foo : DISALLOWED # ALIAS:foo : aliases[ALIAS]/foo # ALIAS:subdir/foo : aliases[ALIAS]/subdir/foo # ALIAS:/oops/subdir/foo : DISALLOWED # DIRCAP:./foo : DIRCAP/foo # DIRCAP:./subdir/foo : DIRCAP/subdir/foo # MUTABLE-FILE-WRITECAP : filecap # FIXME: don't hardcode cap format. if to_file.startswith("URI:MDMF:") or to_file.startswith("URI:SSK:"): url = nodeurl + "uri/%s" % url_quote(to_file) else: try: rootcap, path = get_alias(aliases, to_file, DEFAULT_ALIAS) except UnknownAliasError as e: e.display(stderr) return 1 path = str(path, "utf-8") if path.startswith("/"): suggestion = to_file.replace(u"/", u"", 1) print("Error: The remote filename must not start with a slash", file=stderr) print("Please try again, perhaps with %s" % quote_output(suggestion), file=stderr) return 1 url = nodeurl + "uri/%s/" % url_quote(rootcap) if path: url += escape_path(path) else: # unlinked upload url = nodeurl + "uri" queryargs = [] if mutable: queryargs.append("mutable=true") if private_key is not None: queryargs.append(f"private-key={private_key}") else: if private_key is not None: raise Exception("Can only supply a private key for mutables.") if format: queryargs.append("format=%s" % format) if queryargs: url += "?" + "&".join(queryargs) if from_file: infileobj = open(from_file, "rb") else: # do_http() can't use stdin directly: for one thing, we need a # Content-Length field. So we currently must copy it. if verbosity > 0: print("waiting for file data on stdin..", file=stderr) # We're uploading arbitrary files, so this had better be bytes: stdinb = stdin.buffer data = stdinb.read() infileobj = BytesIO(data) resp = do_http("PUT", url, infileobj) if resp.status in (200, 201,): print(format_http_success(resp), file=stderr) print(quote_output(resp.read(), quotemarks=False), file=stdout) return 0 print(format_http_error("Error", resp), file=stderr) return 1