🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-06-15 08:00:49 | PHP 8.1.34
📂
/ (Root)
/
opt
/
imunify360
/
venv
/
lib
/
python3.11
/
site-packages
/
defence360agent
/
wordpress
/
__pycache__
📍 /opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/wordpress/__pycache__
🔄 Refresh
✏️
Editing: proxy_auth.cpython-311.pyc
Read Only
� *��[�(�� �N � d dl Z d dlZd dlZd dlZd dlZd dlmZmZ d dlmZ d dl m Z d dl m Z d dl mZmZmZ ej e� � Z ed�� � Zd Zd Zd Z ed � � � Zd� Zd� Z ed� � defd�� � Z de de de fd�Z de de ddfd�Z dej! ddfd�Z"dS )� N)�datetime� timedelta)� lru_cache)�Path)�atomic_rewrite)�ensure_site_data_directory� format_php_with_embedded_json�!write_plugin_data_file_atomically�H )�hoursz#/etc/imunify-agent-proxy/jwt-secretz'/etc/imunify-agent-proxy/jwt-secret.oldzimunify-agent-proxy� )�daysc �� � t j t � � } | j }n# t $ r d}Y nw xY wt j � � � � � |z t � � � k S )Ng ) �os�stat�JWT_SECRET_PATH�st_mtime�FileNotFoundErrorr �now� timestamp�SECRET_EXPIRATION_TTL� total_seconds)r r s �Y/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/wordpress/proxy_auth.py�is_secret_expiredr s| � �!��w��'�'�� �=���� � � � ��������� � ��� � �"�"�X�-� � -� -� /� /� 0�s �# � 2�2c � �� K � t t � � } t � d� � t j d� � }| j � ddd�� � | � d�� � t | |dt t � � d� � � t � � � d S # t $ r(}t � d |d� � � Y d }~d S d }~ww xY w) z�Rotate the proxy JWT secret on disk: backup current to .old and write a fresh 32-byte secret atomically. Invalidates the in-process cache so subsequent generate_token() calls read the new secret. zRotating proxy auth secret� i� T)�mode�parents�exist_oki� )r ���)�uid�backup� permissionsz'Got error while rotating the secret: %s)�exc_infoN)r r �logger�info�secrets� token_bytes�parent�mkdir�touchr �str�JWT_SECRET_PATH_OLD�load_secret_from_file� cache_clear� Exception�error)� secret_path� stub_secret�es r � rotate_secretr5 * s � � � � ��'�'�K� �� � �0�1�1�1� �)�"�-�-� ��� � �e�T�D� �I�I�I����u��%�%�%�� � ���*�+�+� � � � � � �)�)�+�+�+�+�+�� � � � �� � � 5�q�4� � � � � � � � � � ����� ���s �B B: �: C,� C'�'C,� �returnc �^ � t t d� � 5 } | � � � � � � cddd� � S # 1 swxY w Y dS # t $ r" t � dt � � � t $ r!}t � d|� � � d}~ww xY w)z.Load JWT secret from the configured file path.�rbNz JWT secret file not found at %sz Failed to read JWT secret: %s)�openr �read�stripr r% r1 r0 )�fr4 s r r. r. C s� � �� �/�4� (� (� $�A��6�6�8�8�>�>�#�#� $� $� $� $� $� $� $� $� $� $� $� $���� $� $� $� $� $� $�� � � � �� � �6��H�H�H� � � � � �� � �4�a�8�8�8� ��������s9 �A �&A � A � A�A �A�A �4B,� B'�'B,�username�docrootc � � t j � � t z }|| |d�} ddl}|� |t � � d�� � }|S # t $ r!}t � d|� � � d}~ww xY w)z� Generate a JWT token for the given username and docroots. Args: username: The username for the token docroot: document root paths the user has access to Returns: The JWT token string )�expr> � site_pathr N�HS256)� algorithmz Failed to generate JWT token: %s) r �utcnow�DEFAULT_TOKEN_EXPIRATION�jwt�encoder. r0 r% r1 )r> r? �exp_time�claimsrG �tokenr4 s r �generate_tokenrL Q s� � � �� � �#;�;�H� �8�'� J� J�F� � � � � �� � �6�#8�#:�#:�g� �N�N��� �� � � � �� � �7��;�;�;� ��������s �)A � A8� A3�3A8rK �gidc � �l K � t j |� � }t | |� � � d{V ��}|dz }d|i}t |� � }t j t ||||� � � d{V �� t � d| |� � dS # t $ r"} t � d| | � � � d} ~ ww xY w)z� Create the auth.php file in the site's imunify-security directory. Args: site: WPSite instance token: JWT token string uid, gid: int used for file creation Nzauth.phprK z'Created auth.php file for site %s at %sz.Failed to create auth.php file for site %s: %s) �pwd�getpwuidr r �asyncio� to_threadr r% r& r0 r1 ) �siterK r! rM � user_info�data_dir�auth_file_path� auth_data� php_contentr4 s r �create_auth_php_filerY m s � � � � ��L��%�%� � 4�D�)�D�D�D�D�D�D�D�D��!�J�.�� �e�$� �3�I�>�>� � � � -� � � � � � � � � � � � � � � � � 5�t�^� � � � � �� � � � �� � �E�t�Q�O�O�O� ��������s �BB � B3� B.�.B3rT c � �2 K � t |j t | j � � � � }t | ||j |j � � � d{V �� t � d| � � dS # t $ r"}t � d| |� � � d}~ww xY w)z� Set up authentication for a site by creating JWT token and auth.php file. Args: site: WPSite instance user_info: pwd.struct_passwd data Nz.Successfully set up authentication for site %sz/Failed to set up authentication for site %s: %s) rL �pw_namer, r? rY �pw_uid�pw_gidr% r& r0 r1 )rS rT rK r4 s r �setup_site_authenticationr^ � s� � � � � � �y� 0�#�d�l�2C�2C�D�D��"� �%��)�9�+;� � � � � � � � � � � � �D�d�K�K�K�K�K�� � � � �� � � =�t�Q� � � � ����� ���s �A$A* �* B�4 B�B)#rQ �loggingr rO r' r r � functoolsr �pathlibr �defence360agent.utilsr � defence360agent.wordpress.utilsr r r � getLogger�__name__r% rF r r- �PROXY_SERVICE_NAMEr r r5 �bytesr. r, rL �intrY � struct_passwdr^ � � r �<module>rl s� �� ���� ���� � � � � � � � � ���� (� (� (� (� (� (� (� (� � � � � � � � � � � � � 0� 0� 0� 0� 0� 0�� � � � � � � � � � �� �8� $� $��$�9�2�.�.�.� �7��?� �*� �!� �q�)�)�)� � � � � � � �2 ��1� � � �u� � � � � � ��S� �3� �3� � � � �8%�C� %�3� %�4� %� %� %� %�P��&�� �� � � � � rk
💾 Save Changes
❌ Cancel