339 lines
12 KiB
Python
339 lines
12 KiB
Python
import json
|
||
|
||
from sslModel.base import sslBase
|
||
|
||
import public
|
||
|
||
import copy
|
||
import sys
|
||
import hashlib
|
||
import hmac
|
||
import binascii
|
||
from datetime import datetime
|
||
import requests
|
||
|
||
|
||
class main(sslBase):
|
||
dns_provider_name = "huaweicloud"
|
||
_type = 0
|
||
|
||
def __init__(self):
|
||
super().__init__()
|
||
self.region = "cn-south-1"
|
||
self.BasicDateFormat = "%Y%m%dT%H%M%SZ"
|
||
self.Algorithm = "SDK-HMAC-SHA256"
|
||
self.HeaderXDate = "X-Sdk-Date"
|
||
self.HeaderHost = "host"
|
||
self.HeaderAuthorization = "Authorization"
|
||
self.HeaderContentSha256 = "x-sdk-content-sha256"
|
||
self.url = "https://dns.cn-north-1.myhuaweicloud.com"
|
||
|
||
def __init_data(self, data):
|
||
self.ak = data["AccessKey"]
|
||
self.sk = data["SecretKey"]
|
||
self.project_id = data["project_id"]
|
||
|
||
def sign_to_response(self, dns_id, method="", url="", headers=None, body=""):
|
||
url = self.url + url
|
||
self.__init_data(self.get_dns_data(None)[dns_id])
|
||
if sys.version_info.major < 3:
|
||
body = body
|
||
from urllib import quote, unquote
|
||
|
||
def hmacsha256(keyByte, message):
|
||
return hmac.new(keyByte, message, digestmod=hashlib.sha256).digest()
|
||
|
||
# Create a "String to Sign".
|
||
def StringToSign(canonicalRequest, t):
|
||
bytes = HexEncodeSHA256Hash(canonicalRequest)
|
||
return "%s\n%s\n%s" % (self.Algorithm, datetime.strftime(t, self.BasicDateFormat), bytes)
|
||
|
||
else:
|
||
body = body.encode("utf-8")
|
||
from urllib.parse import quote, unquote
|
||
|
||
def hmacsha256(keyByte, message):
|
||
return hmac.new(keyByte.encode('utf-8'), message.encode('utf-8'), digestmod=hashlib.sha256).digest()
|
||
|
||
# Create a "String to Sign".
|
||
def StringToSign(canonicalRequest, t):
|
||
bytes = HexEncodeSHA256Hash(canonicalRequest.encode('utf-8'))
|
||
return "%s\n%s\n%s" % (self.Algorithm, datetime.strftime(t, self.BasicDateFormat), bytes)
|
||
|
||
def HexEncodeSHA256Hash(data):
|
||
sha256 = hashlib.sha256()
|
||
sha256.update(data)
|
||
return sha256.hexdigest()
|
||
|
||
def findHeader(headers, header):
|
||
for k in headers:
|
||
if k.lower() == header.lower():
|
||
return headers[k]
|
||
return None
|
||
|
||
def CanonicalQueryString(query):
|
||
keys = []
|
||
for key in query:
|
||
keys.append(key)
|
||
keys.sort()
|
||
a = []
|
||
for key in keys:
|
||
k = quote(key, safe='~')
|
||
value = query[key]
|
||
if type(value) is list:
|
||
value.sort()
|
||
for v in value:
|
||
kv = k + "=" + quote(str(v), safe='~')
|
||
a.append(kv)
|
||
else:
|
||
kv = k + "=" + quote(str(value), safe='~')
|
||
a.append(kv)
|
||
return '&'.join(a)
|
||
|
||
def SignStringToSign(stringToSign, signingKey):
|
||
hm = hmacsha256(signingKey, stringToSign)
|
||
return binascii.hexlify(hm).decode()
|
||
|
||
def AuthHeaderValue(signature, AppKey, signedHeaders):
|
||
return "%s Access=%s, SignedHeaders=%s, Signature=%s" % (
|
||
self.Algorithm, AppKey, ";".join(signedHeaders), signature)
|
||
|
||
spl = url.split("://", 1)
|
||
scheme = 'http'
|
||
if len(spl) > 1:
|
||
scheme = spl[0]
|
||
url = spl[1]
|
||
query = {}
|
||
spl = url.split('?', 1)
|
||
url = spl[0]
|
||
if len(spl) > 1:
|
||
for kv in spl[1].split("&"):
|
||
spl = kv.split("=", 1)
|
||
key = spl[0]
|
||
value = ""
|
||
if len(spl) > 1:
|
||
value = spl[1]
|
||
if key != '':
|
||
key = unquote(key)
|
||
value = unquote(value)
|
||
if key in query:
|
||
query[key].append(value)
|
||
else:
|
||
query[key] = [value]
|
||
spl = url.split('/', 1)
|
||
host = spl[0]
|
||
if len(spl) > 1:
|
||
url = '/' + spl[1]
|
||
else:
|
||
url = '/'
|
||
if headers is None:
|
||
headers = {"content-type": "application/json"}
|
||
else:
|
||
headers = copy.deepcopy(headers)
|
||
|
||
headerTime = findHeader(headers, self.HeaderXDate)
|
||
|
||
if headerTime is None:
|
||
t = datetime.utcnow()
|
||
headers[self.HeaderXDate] = datetime.strftime(t, self.BasicDateFormat)
|
||
else:
|
||
t = datetime.strptime(headerTime, self.BasicDateFormat)
|
||
|
||
haveHost = False
|
||
for key in headers:
|
||
if key.lower() == 'host':
|
||
haveHost = True
|
||
break
|
||
if not haveHost:
|
||
headers["host"] = host
|
||
signedHeaders = []
|
||
for key in headers:
|
||
signedHeaders.append(key.lower())
|
||
signedHeaders.sort()
|
||
a = []
|
||
__headers = {}
|
||
for key in headers:
|
||
keyEncoded = key.lower()
|
||
value = headers[key]
|
||
valueEncoded = value.strip()
|
||
__headers[keyEncoded] = valueEncoded
|
||
if sys.version_info.major == 3:
|
||
headers[key] = valueEncoded.encode("utf-8").decode('iso-8859-1')
|
||
for key in signedHeaders:
|
||
a.append(key + ":" + __headers[key])
|
||
canonicalHeaders = '\n'.join(a) + "\n"
|
||
|
||
hexencode = findHeader(headers, self.HeaderContentSha256)
|
||
if hexencode is None:
|
||
hexencode = HexEncodeSHA256Hash(body)
|
||
pattens = unquote(url).split('/')
|
||
CanonicalURI = []
|
||
for v in pattens:
|
||
CanonicalURI.append(quote(v, safe="~"))
|
||
CanonicalURL = "/".join(CanonicalURI)
|
||
if CanonicalURL[-1] != '/':
|
||
CanonicalURL = CanonicalURL + "/" # always end with /
|
||
|
||
canonicalRequest = "%s\n%s\n%s\n%s\n%s\n%s" % (method.upper(), CanonicalURL, CanonicalQueryString(query),
|
||
canonicalHeaders, ";".join(signedHeaders), hexencode)
|
||
|
||
stringToSign = StringToSign(canonicalRequest, t)
|
||
signature = SignStringToSign(stringToSign, self.sk)
|
||
authValue = AuthHeaderValue(signature, self.ak, signedHeaders)
|
||
headers[self.HeaderAuthorization] = authValue
|
||
headers["content-length"] = str(len(body))
|
||
queryString = CanonicalQueryString(query)
|
||
if queryString != "":
|
||
url = url + "?" + queryString
|
||
|
||
res = requests.request(method, scheme + "://" + host + url, headers=headers, data=body)
|
||
return res
|
||
|
||
def create_dns_record(self, get):
|
||
domain_name = get.domain_name
|
||
domain_dns_value = get.domain_dns_value
|
||
record_type = 'TXT'
|
||
if 'record_type' in get:
|
||
record_type = get.record_type
|
||
if record_type == 'TXT':
|
||
domain_dns_value = "\"{}\"".format(domain_dns_value)
|
||
|
||
root_domain, sub_domain, _ = self.extract_zone(domain_name)
|
||
if sub_domain == "@":
|
||
domain_name = root_domain
|
||
|
||
try:
|
||
zone_dic = self.get_zoneid_dict(get.dns_id)
|
||
zone_id = zone_dic.get(root_domain)
|
||
body = json.dumps({
|
||
"name": domain_name,
|
||
"type": record_type,
|
||
"records": [domain_dns_value],
|
||
})
|
||
|
||
res = self.sign_to_response(get.dns_id, "POST", "/v2/zones/{}/recordsets".format(zone_id), body=body)
|
||
if res.status_code != 202:
|
||
return public.returnMsg(False, self.get_error(res.text))
|
||
|
||
return public.returnMsg(True, '添加成功')
|
||
except Exception as e:
|
||
return public.returnMsg(False, self.get_error(str(e)))
|
||
|
||
def delete_dns_record(self, get):
|
||
domain_name = get.domain_name
|
||
RecordId = get.RecordId
|
||
root_domain, _, sub_domain = self.extract_zone(domain_name)
|
||
|
||
zone_dic = self.get_zoneid_dict(get.dns_id)
|
||
zone_id = zone_dic[root_domain]
|
||
try:
|
||
res = self.sign_to_response(get.dns_id, "DELETE", "/v2/zones/{}/recordsets/{}".format(zone_id, RecordId))
|
||
if res.status_code != 202:
|
||
return public.returnMsg(False, self.get_error(res.text))
|
||
return public.returnMsg(True, '删除成功')
|
||
except Exception as e:
|
||
return public.returnMsg(False, self.get_error(str(e)))
|
||
|
||
def get_zoneid_dict(self, dns_id):
|
||
"""
|
||
获取所有域名对应id
|
||
"""
|
||
res = self.sign_to_response(dns_id, "GET", "/v2/zones")
|
||
if res.status_code != 200:
|
||
return {}
|
||
response = res.json()
|
||
data = {i["name"][:-1]: i["id"] for i in response["zones"]}
|
||
|
||
return data
|
||
|
||
def get_dns_record(self, get):
|
||
domain_name = get.domain_name
|
||
root_domain, _, sub_domain = self.extract_zone(domain_name)
|
||
data = {}
|
||
try:
|
||
zone_dic = self.get_zoneid_dict(get.dns_id)
|
||
limit = 100
|
||
offset = 0
|
||
zone_id = zone_dic[root_domain]
|
||
res = self.sign_to_response(get.dns_id, "GET",
|
||
"/v2/zones/{}/recordsets?limit={}&offset={}".format(zone_id, limit, offset))
|
||
if res.status_code != 200:
|
||
return {}
|
||
response = res.json()
|
||
|
||
data["list"] = [
|
||
{
|
||
"RecordId": i["id"],
|
||
"name": i["name"][:-1],
|
||
"value": '\r\n'.join(i["records"]) if i["type"] != "TXT" else '\r\n'.join([j.replace('"', '') for j in i["records"]]),
|
||
"line": "默认",
|
||
"ttl": i["ttl"],
|
||
"type": i["type"],
|
||
"status": "启用"if i["status"] == "ACTIVE" else "暂停" if i["status"] == "DISABLE" else i["status"],
|
||
"mx": "",
|
||
"updated_on": i["update_at"],
|
||
"remark": i.get("description") or "",
|
||
}
|
||
for i in response["recordsets"]
|
||
]
|
||
data["info"] = {
|
||
'record_total': response['metadata']['total_count']
|
||
}
|
||
except Exception as e:
|
||
pass
|
||
self.set_record_data({root_domain: data})
|
||
return data
|
||
|
||
def update_dns_record(self, get):
|
||
domain_name = get.domain_name
|
||
RecordId = get.RecordId
|
||
record_type = get.record_type
|
||
domain_dns_value = get.domain_dns_value
|
||
root_domain, _, sub_domain = self.extract_zone(domain_name)
|
||
|
||
if sub_domain == "@":
|
||
domain_name = root_domain
|
||
if record_type == 'TXT':
|
||
domain_dns_value = "\"{}\"".format(domain_dns_value)
|
||
|
||
zone_dic = self.get_zoneid_dict(get.dns_id)
|
||
zone_id = zone_dic[root_domain]
|
||
try:
|
||
body = json.dumps({
|
||
"name": domain_name,
|
||
"type": record_type,
|
||
"records": [domain_dns_value],
|
||
})
|
||
|
||
res = self.sign_to_response(get.dns_id, "PUT", "/v2/zones/{}/recordsets/{}".format(zone_id, RecordId), body=body)
|
||
if res.status_code != 202:
|
||
return public.returnMsg(False, self.get_error(res.text))
|
||
|
||
return public.returnMsg(True, '修改成功')
|
||
except Exception as e:
|
||
return public.returnMsg(False, self.get_error(str(e)))
|
||
|
||
def get_error(self, error):
|
||
if "DNS.0317" in error:
|
||
return "此记录为系统默认域名记录值，不能删除。"
|
||
elif "DNS.0318" in error:
|
||
return "此记录为系统默认域名记录值，不能更新。"
|
||
elif "DNS.0321" in error:
|
||
return "子域名级别超过限制。"
|
||
elif "DNS.0324" in error:
|
||
return "系统默认解析记录不能操作。"
|
||
elif "DNS.0308" in error:
|
||
return "记录集类型非法。"
|
||
elif "DNS.0307" in error:
|
||
return "记录集的值非法。"
|
||
elif "DNS.0302" in error:
|
||
return "这个华为云账户下面不存在这个域名，请检查dns接口配置后重试"
|
||
elif "APIGW.0301" in error:
|
||
return "dns账号信息有误"
|
||
elif "DNS.0312" in error:
|
||
return "存在同名的主机记录"
|
||
elif "DNS.0313" in error:
|
||
return "不存在这条记录"
|
||
else:
|
||
return error
|