Initial YakPanel commit
This commit is contained in:
Niranjan
199
class/sslModel/aliyunModel.py
Normal file
199
class/sslModel/aliyunModel.py
Normal file
@@ -0,0 +1,199 @@
|
||||
import time
|
||||
|
||||
from sslModel.base import sslBase
|
||||
|
||||
import public
|
||||
import os
|
||||
|
||||
from urllib.parse import urlencode, quote_plus
|
||||
import hashlib
|
||||
import hmac
|
||||
import uuid
|
||||
import pytz
|
||||
import requests
|
||||
from datetime import datetime
|
||||
|
||||
|
||||
|
||||
class main(sslBase):
|
||||
dns_provider_name = "aliyun"
|
||||
_type = 0
|
||||
|
||||
def __init__(self):
|
||||
super().__init__()
|
||||
|
||||
def __init_data(self, data):
|
||||
self.access_key_id = data["AccessKey"]
|
||||
self.access_key_secret = data["SecretKey"]
|
||||
self.endpoint = "alidns.cn-hangzhou.aliyuncs.com"
|
||||
self.ALGORITHM = "ACS3-HMAC-SHA256"
|
||||
self.x_acs_version = "2015-01-09"
|
||||
|
||||
def sign_to_response(self, dns_id, action, query_param):
|
||||
self.__init_data(self.get_dns_data(None)[dns_id])
|
||||
|
||||
def hmac256(key, msg):
|
||||
return hmac.new(key, msg.encode('utf-8'), hashlib.sha256).digest()
|
||||
|
||||
def sha256_hex(s):
|
||||
return hashlib.sha256(s.encode('utf-8')).hexdigest()
|
||||
|
||||
def percent_code(encoded_str):
|
||||
return encoded_str.replace('+', '%20').replace('*', '%2A').replace('%7E', '~')
|
||||
|
||||
headers = {
|
||||
"host": self.endpoint,
|
||||
"x-acs-action": action,
|
||||
"x-acs-version": self.x_acs_version,
|
||||
"x-acs-date": datetime.now(pytz.timezone('Etc/GMT')).strftime('%Y-%m-%dT%H:%M:%SZ'),
|
||||
"x-acs-signature-nonce": str(uuid.uuid4()),
|
||||
}
|
||||
|
||||
sorted_query_params = sorted(query_param.items(), key=lambda item: item[0])
|
||||
query_param = {k: v for k, v in sorted_query_params}
|
||||
|
||||
# Step 1: Construct Canonical Query String and Payload Hash
|
||||
canonical_query_string = '&'.join(
|
||||
f'{percent_code(quote_plus(k))}={percent_code(quote_plus(str(v)))}' for k, v in
|
||||
query_param.items())
|
||||
hashed_request_payload = sha256_hex('')
|
||||
headers['x-acs-content-sha256'] = hashed_request_payload
|
||||
sorted_headers = sorted(headers.items(), key=lambda item: item[0])
|
||||
headers = {k: v for k, v in sorted_headers}
|
||||
|
||||
# Construct Canonical Headers and Signed Headers
|
||||
canonical_headers = '\n'.join(f'{k.lower()}:{v}' for k, v in headers.items() if
|
||||
k.lower().startswith('x-acs-') or k.lower() in ['host', 'content-type'])
|
||||
signed_headers = ';'.join(sorted(headers.keys(), key=lambda x: x.lower()))
|
||||
|
||||
canonical_request = f'GET\n/\n{canonical_query_string}\n{canonical_headers}\n\n{signed_headers}\n{hashed_request_payload}'
|
||||
|
||||
# Step 2: Construct String to Sign
|
||||
hashed_canonical_request = sha256_hex(canonical_request)
|
||||
string_to_sign = f'{self.ALGORITHM}\n{hashed_canonical_request}'
|
||||
|
||||
# Step 3: Compute Signature
|
||||
signature = hmac256(self.access_key_secret.encode('utf-8'), string_to_sign).hex().lower()
|
||||
|
||||
# Step 4: Construct Authorization Header
|
||||
authorization = f'{self.ALGORITHM} Credential={self.access_key_id},SignedHeaders={signed_headers},Signature={signature}'
|
||||
headers['Authorization'] = authorization
|
||||
|
||||
url = f'https://{self.endpoint}/'
|
||||
if query_param:
|
||||
url += '?' + urlencode(query_param, doseq=True, safe='*')
|
||||
headers = {k: v for k, v in headers.items()}
|
||||
|
||||
response = requests.request(method="GET", url=url, headers=headers)
|
||||
return response
|
||||
|
||||
|
||||
def create_dns_record(self, get):
|
||||
domain_name = get.domain_name
|
||||
domain_dns_value = get.domain_dns_value
|
||||
record_type = 'TXT'
|
||||
if 'record_type' in get:
|
||||
record_type = get.record_type
|
||||
|
||||
domain_name, sub_domain, _ = self.extract_zone(domain_name)
|
||||
|
||||
if not sub_domain:
|
||||
sub_domain = '@'
|
||||
|
||||
query_param = {
|
||||
"DomainName": domain_name,
|
||||
"RR": sub_domain,
|
||||
"Type": record_type,
|
||||
"Value": domain_dns_value
|
||||
}
|
||||
|
||||
try:
|
||||
response = self.sign_to_response(get.dns_id, "AddDomainRecord", query_param)
|
||||
if response.status_code != 200:
|
||||
return public.returnMsg(False, self.get_error(response.text))
|
||||
return public.returnMsg(True, '添加成功')
|
||||
except Exception as e:
|
||||
return public.returnMsg(False, self.get_error(str(e)))
|
||||
|
||||
def delete_dns_record(self, get):
|
||||
RecordId = get.RecordId
|
||||
|
||||
try:
|
||||
response = self.sign_to_response(get.dns_id, "DeleteDomainRecord", {"RecordId":RecordId})
|
||||
if response.status_code != 200:
|
||||
return public.returnMsg(False, self.get_error(response.text))
|
||||
return public.returnMsg(True, '删除成功')
|
||||
except Exception as e:
|
||||
return public.returnMsg(False, self.get_error(str(e)))
|
||||
|
||||
def get_dns_record(self, get):
|
||||
domain_name, _, sub_domain = self.extract_zone(get.domain_name)
|
||||
data = {}
|
||||
try:
|
||||
response = self.sign_to_response(get.dns_id, "DescribeDomainRecords", {"DomainName": domain_name})
|
||||
res = response.json()
|
||||
if response.status_code != 200:
|
||||
return {}
|
||||
data["list"] = [
|
||||
{
|
||||
"RecordId": i["RecordId"],
|
||||
"name": i["RR"] + "." + domain_name if i["RR"] != '@' else domain_name,
|
||||
"value": i["Value"],
|
||||
"line": i["Line"],
|
||||
"ttl": i["TTL"],
|
||||
"type": i["Type"],
|
||||
"status": "启用" if i["Status"] == "ENABLE" else "暂停" if i["Status"] == "DISABLE" else i["Status"],
|
||||
"mx": i.get("Priority") or 0,
|
||||
"updated_on": time.strftime("%Y-%m-%d %H:%M:%S", time.localtime(i["UpdateTimestamp"] / 1000)),
|
||||
"remark": i.get("Remark") or "",
|
||||
}
|
||||
for i in res["DomainRecords"]["Record"]
|
||||
]
|
||||
data["info"] = {
|
||||
"record_total": res["TotalCount"]
|
||||
}
|
||||
|
||||
except Exception as e:
|
||||
pass
|
||||
self.set_record_data({domain_name: data})
|
||||
return data
|
||||
|
||||
def update_dns_record(self, get):
|
||||
RecordId = get.RecordId
|
||||
domain_name = get.domain_name
|
||||
domain_dns_value = get.domain_dns_value
|
||||
record_type = get.record_type
|
||||
|
||||
domain_name, sub_domain, _ = self.extract_zone(domain_name)
|
||||
|
||||
try:
|
||||
params = {
|
||||
"RecordId": RecordId,
|
||||
"Type": record_type,
|
||||
"Value": domain_dns_value,
|
||||
"RR": sub_domain,
|
||||
}
|
||||
response = self.sign_to_response(get.dns_id, "UpdateDomainRecord", params)
|
||||
if response.status_code != 200:
|
||||
return public.returnMsg(False, self.get_error(response.text))
|
||||
return public.returnMsg(True, "修改成功")
|
||||
except Exception as e:
|
||||
return public.returnMsg(False, self.get_error(str(e)))
|
||||
|
||||
def get_error(self, error):
|
||||
if "DomainRecordConflict" in error:
|
||||
return "与其他记录冲突，不能添加"
|
||||
elif "SubDomainInvalid.Value" in error:
|
||||
return "DNS记录值无效或者格式错误"
|
||||
elif "DomainRecordDuplicate" in error:
|
||||
return "解析记录已存在"
|
||||
elif "The parameter value RR is invalid" in error:
|
||||
return "主机记录错误，请检查后重试"
|
||||
elif "InvalidDomainName.NoExist" in error:
|
||||
return "这个阿里云账户下面不存在这个域名，请检查dns接口配置后重试"
|
||||
elif "IncorrectDomainUser" in error:
|
||||
return "这个阿里云账户下面不存在这个域名，请检查dns接口配置后重试"
|
||||
elif "InvalidAccessKeyId.NotFound" in error:
|
||||
return "无效的Access Key"
|
||||
else:
|
||||
return error
|
||||
Reference in New Issue
Block a user