import binascii import logging import re from json import JSONDecodeError import hashlib import aiohttp import ecdsa from aiohttp import ClientConnectorError from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives.serialization import load_der_public_key from cryptography.hazmat.primitives import hashes from cryptography.hazmat.primitives.asymmetric import ec from cryptography.hazmat.primitives.asymmetric.utils import Prehashed from cryptography.exceptions import InvalidSignature logger = logging.getLogger(__name__) ID_LIST = {'claim_id', 'parent_id', 'comment_id', 'channel_id'} ERRORS = { 'INVALID_PARAMS': {'code': -32602, 'message': 'Invalid Method Parameter(s).'}, 'INTERNAL': {'code': -32603, 'message': 'Internal Server Error. Please notify a LBRY Administrator.'}, 'METHOD_NOT_FOUND': {'code': -32601, 'message': 'The method does not exist / is not available.'}, 'INVALID_REQUEST': {'code': -32600, 'message': 'The JSON sent is not a valid Request object.'}, 'PARSE_ERROR': { 'code': -32700, 'message': 'Invalid JSON was received by the server.\n' 'An error occurred on the server while parsing the JSON text.' } } def make_error(error, exc=None) -> dict: body = ERRORS[error] if error in ERRORS else ERRORS['INTERNAL'] try: if exc: body.update({type(exc).__name__: str(exc)}) finally: return body async def request_lbrynet(app, method, **params): body = {'method': method, 'params': {**params}} try: async with aiohttp.request('POST', app['config']['lbrynet'], json=body) as req: try: resp = await req.json() except JSONDecodeError as jde: logger.exception(jde.msg) raise Exception('JSON Decode Error In lbrynet request') finally: if 'result' in resp: return resp['result'] raise ValueError('LBRYNET Request Error', {'error': resp['error']}) except (ConnectionRefusedError, ClientConnectorError): logger.critical("Connection to the LBRYnet daemon failed, make sure it's running.") raise Exception("Server cannot verify delete signature") async def get_claim_from_id(app, claim_id, **kwargs): return (await request_lbrynet(app, 'claim_search', no_totals=True, claim_id=claim_id, **kwargs))['items'][0] def get_encoded_signature(signature): signature = signature.encode() if type(signature) is str else signature r = int(signature[:int(len(signature) / 2)], 16) s = int(signature[int(len(signature) / 2):], 16) return ecdsa.util.sigencode_der(r, s, len(signature) * 4) def channel_matches_pattern_or_error(channel_id, channel_name): assert channel_id and channel_name assert re.fullmatch( '^@(?:(?![\x00-\x08\x0b\x0c\x0e-\x1f\x23-\x26' '\x2f\x3a\x3d\x3f-\x40\uFFFE-\U0000FFFF]).){1,255}$', channel_name ) assert re.fullmatch('([a-f0-9]|[A-F0-9]){40}', channel_id) return True def is_signature_valid(encoded_signature, signature_digest, public_key_bytes): try: public_key = load_der_public_key(public_key_bytes, default_backend()) public_key.verify(encoded_signature, signature_digest, ec.ECDSA(Prehashed(hashes.SHA256()))) return True except (ValueError, InvalidSignature): logger.exception('Signature validation failed') return False def is_valid_base_comment(comment, claim_id, parent_id=None, **kwargs): try: assert 0 < len(comment) <= 2000 assert (parent_id is None) or (0 < len(parent_id) <= 2000) assert re.fullmatch('[a-z0-9]{40}', claim_id) except Exception: return False return True def is_valid_credential_input(channel_id=None, channel_name=None, signature=None, signing_ts=None, **kwargs): if channel_name or channel_name or signature or signing_ts: try: assert channel_matches_pattern_or_error(channel_id, channel_name) if signature or signing_ts: assert len(signature) == 128 assert signing_ts.isalnum() except Exception: return False return True def validate_signature_from_claim(claim, signature, signing_ts, data: str): try: if claim: public_key = claim['value']['public_key'] claim_hash = binascii.unhexlify(claim['claim_id'].encode())[::-1] injest = b''.join((signing_ts.encode(), claim_hash, data.encode())) return is_signature_valid( encoded_signature=get_encoded_signature(signature), signature_digest=hashlib.sha256(injest).digest(), public_key_bytes=binascii.unhexlify(public_key.encode()) ) except: return False def clean_input_params(kwargs: dict): for k, v in kwargs.items(): if type(v) is str: kwargs[k] = v.strip() if k in ID_LIST: kwargs[k] = v.lower()