ó ‹'=[c@sÏdZddlZddlmZddlmZddlmZddlZddlm Z ddl Z ddl Z ddl Z yddl Z Wn?ek rÓyddlmZ WqÔek rÏdZ qÔXnXddlmZmZmZdd lmZmZmZmZmZmZmZmZmZm Z dd l!m"Z"m#Z#dd l$m%Z%m&Z&d d l'm(Z(m)Z)m*Z*m+Z+y5ej,Z-ge-D]Z.e.j/dƒs—e.^q—Z-Wne0k rÕej-Z-nXdefd„ƒYZ1de2fd„ƒYZ3de3fd„ƒYZ4de3e"fd„ƒYZ5d„Z6d„Z7ed„ƒZ8de"fd„ƒYZ9iiie:d6d6dfd6Z;e;j<e&ƒde%fd„ƒYZ=e=j>Z?e@d krËe?ƒndS(!sUtilities for signing notebooksiÿÿÿÿN(t OrderedDict(tcontextmanager(tdatetime(tHMAC(tdbapi2(t unicode_typet cast_bytest cast_unicode( tInstancetBytestEnumtAnytUnicodetBooltIntegert TraitTypetdefaulttobserve(tLoggingConfigurabletMultipleInstanceError(t JupyterAppt base_flagsi(treadtreadst NO_CONVERTt __version__tshake_tCallablecBseZdZdZd„ZRS(sxA trait which is callable. Notes ----- Classes are callable, as are instances with a __call__() method.s a callablecCs$t|ƒr|S|j||ƒdS(N(tcallableterror(tselftobjtvalue((s,lib/python2.7/site-packages/nbformat/sign.pytvalidate8s (t__name__t __module__t__doc__t info_textR!(((s,lib/python2.7/site-packages/nbformat/sign.pyR.stSignatureStorecBs2eZdZd„Zd„Zd„Zd„ZRS(s!Base class for a signature store.cCs t‚dS(srImplement in subclass to store a signature. Should not raise if the signature is already stored. N(tNotImplementedError(Rtdigestt algorithm((s,lib/python2.7/site-packages/nbformat/sign.pytstore_signatureAscCs t‚dS(sImplement in subclass to check if a signature is known. Return True for a known signature, False for unknown. N(R'(RR(R)((s,lib/python2.7/site-packages/nbformat/sign.pytcheck_signatureHscCs t‚dS(soImplement in subclass to delete a signature. Should not raise if the signature is not stored. N(R'(RR(R)((s,lib/python2.7/site-packages/nbformat/sign.pytremove_signatureOscCsdS(s¡Close any open connections this store may use. If the store maintains any open connections (e.g. to a database), they should be closed. N((R((s,lib/python2.7/site-packages/nbformat/sign.pytcloseVs(R"R#R$R*R+R,R-(((s,lib/python2.7/site-packages/nbformat/sign.pyR&?s    tMemorySignatureStorecBsAeZdZdZd„Zd„Zd„Zd„Zd„ZRS(s4Non-persistent storage of signatures in memory. iÿÿcCstƒ|_dS(N(Rtdata(R((s,lib/python2.7/site-packages/nbformat/sign.pyt__init__cscCs:||f}|jj|dƒd|j|<|jƒdS(N(R/tpoptNonet _maybe_cull(RR(R)tkey((s,lib/python2.7/site-packages/nbformat/sign.pyR*hs  cCsWt|jƒ|jkrdSx4tt|jƒdƒD]}|jjdtƒq6WdS(sMIf more than cache_size signatures are stored, delete the oldest 25% Nitlast(tlenR/t cache_sizetrangetpopitemtFalse(Rt_((s,lib/python2.7/site-packages/nbformat/sign.pyR3ps cCs:||f}||jkr6|j|=d|j|soA callable returning the storage backend for notebook signatures. The default uses an SQLite database.R?t store_factorycs‡fd†}|S(Ncs0tdkr#ˆjjdƒtƒStˆjƒS(Ns1Missing SQLite3, all notebooks will be untrusted!(RGR2RNROR.R=RA((R(s,lib/python2.7/site-packages/nbformat/sign.pytfactoryPs ((RR}((Rs,lib/python2.7/site-packages/nbformat/sign.pyt_store_factory_defaultNssÒThe sqlite file in which to store notebook signatures. By default, this will be in your Jupyter data directory. You can set it to ':memory:' to disable sqlite writing to the filesystem. RAcCs#|js dStjj|jdƒS(Ns:memory:unbsignatures.db(RuRPtpathtjoin(R((s,lib/python2.7/site-packages/nbformat/sign.pyt_db_file_default]s t default_valuetsha256s-The hashing algorithm used to sign notebooks.R)cCstt|jƒ|_dS(N(tgetattrthashlibtnewt digestmod(Rtchange((s,lib/python2.7/site-packages/nbformat/sign.pyt_algorithm_changedfsR‡cCstt|jƒS(N(R„R…R)(R((s,lib/python2.7/site-packages/nbformat/sign.pyt_digestmod_defaultkss(The file where the secret key is stored.t secret_filecCs#|js dStjj|jdƒS(Nttnotebook_secret(RuRPRR€(R((s,lib/python2.7/site-packages/nbformat/sign.pyt_secret_file_defaultrs s/The secret key with which notebooks are signed.tsecretcCsmtjj|jƒr@tj|jdƒ}|jƒSWdQXn)tjtj dƒƒ}|j |ƒ|SdS(Ntrbi( RPRtexistsR‹tiotopenRtbase64t encodestringturandomt_write_secret_file(RtfR((s,lib/python2.7/site-packages/nbformat/sign.pyt_secret_default{s  cKs)tt|ƒj||jƒ|_dS(N(R@RtR0R|tstore(RRD((s,lib/python2.7/site-packages/nbformat/sign.pyR0†scCs†|jjd|jƒtj|jdƒ}|j|ƒWdQXytj|jdƒWn'tk r|jj d|jƒnX|S(s!write my secret to my secret_files"Writing notebook-signing key to %stwbNi€sCould not set permissions on %s( RNtinfoR‹R’R“twriteRPtchmodRRRO(RRR˜((s,lib/python2.7/site-packages/nbformat/sign.pyR—Šs  cCsYt|jd|jƒ}t|ƒ)x!t|ƒD]}|j|ƒq2WWdQX|jƒS(sxCompute a notebook's signature by hashing the entire contents of the notebook via HMAC digest. R‡N(RRR‡RsRatupdatet hexdigest(RRlthmacRe((s,lib/python2.7/site-packages/nbformat/sign.pytcompute_signature˜s  cCs8|jdkrtS|j|ƒ}|jj||jƒS(seCheck a notebook's stored signature If a signature is stored in the notebook's metadata, a new signature is computed and compared with the stored value. Returns True if the signature is found and matches, False otherwise. The following conditions must all be met for a notebook to be trusted: - a signature is stored in the form 'scheme:hexdigest' - the stored scheme matches the requested scheme - the requested scheme is available from hashlib - the computed hash from notebook_signature matches the stored hash i(RkR:R¢RšR+R)(RRlRq((s,lib/python2.7/site-packages/nbformat/sign.pyR+¦scCs<|jdkrdS|j|ƒ}|jj||jƒdS(s°Sign a notebook, indicating that its output is trusted on this machine Stores hash algorithm and hmac digest in a local database of trusted notebooks. iN(RkR¢RšR*R)(RRlRq((s,lib/python2.7/site-packages/nbformat/sign.pytsign¹scCs)|j|ƒ}|jj||jƒdS(s~Ensure that a notebook is untrusted by removing its signature from the trusted database, if present. N(R¢RšR,R)(RRlRq((s,lib/python2.7/site-packages/nbformat/sign.pytunsignÃscCs<|jdkrdSx"t|ƒD]}||dd}|d}||krjt|ƒ}|j|ƒr¨tSqjqjWtS( sDo we trust an individual cell? Return True if: - cell is explicitly trusted - cell has no potentially unsafe rich output If a cell has no output, or only simple print statements, it will always be trusted. RpR¥itexecute_resultt display_datat output_typetexecution_counttpyoutt prompt_numbertoutputs(R1R:R<tsett difference(RRmtnbformat_versiontunsafe_output_typest safe_keystoutputR©t output_keys((s,lib/python2.7/site-packages/nbformat/sign.pyt _check_cellÚs        cCsR|jdkrtSt}x2t|ƒD]$}|j||jƒs&t}q&q&W|S(s*Return whether all code cells are trusted. A cell is trusted if the 'trusted' field in its metadata is truthy, or if it has no potentially unsafe outputs. If there are no code cells, return True. This function is the inverse of mark_cells. i(RkR:R<RoRµ(RRlR¥Rm((s,lib/python2.7/site-packages/nbformat/sign.pyt check_cellsûs  ($R"R#R$R RuRR{RR]R<R|R~RARR t algorithmsR)RR‰R R‡RŠR‹RŽR RR™R0R—R¢R+R£R¤R¦RµR¶(((s,lib/python2.7/site-packages/nbformat/sign.pyRt8s@                !tresettTrustNotebookAppsjDelete the trusted notebook cache. All previously signed notebooks will become untrusted. cBs›eZeZdZedƒd„ƒZdZeZ e e ddƒj de ƒZeeƒZedƒd„ƒZd „Zd d „Zd „Zd „ZRS(s¸Sign one or more Jupyter notebooks with your key, to trust their dynamic (HTML, Javascript) output. Otherwise, you will have to re-execute the notebook to see output. tconfig_file_namecCsdS(Ntjupyter_notebook_config((R((s,lib/python2.7/site-packages/nbformat/sign.pyt_config_file_name_default"ss; jupyter trust mynotebook.ipynb and_this_one.ipynb R>sIf True, delete the trusted signature cache. After reset, all previously signed notebooks will become untrusted. R?tnotarycCstd|d|jƒS(NtparentRu(RtRu(R((s,lib/python2.7/site-packages/nbformat/sign.pyt_notary_default3scCswtjj|ƒs6|jjd|ƒ|jdƒntj|ddƒ}t|t ƒ}WdQX|j ||ƒdS(s#Sign a notebook from the filesystemsNotebook missing: %sitencodingR^N( RPRR‘RNRtexitR’R“RRt sign_notebook(Rt notebook_pathR˜Rl((s,lib/python2.7/site-packages/nbformat/sign.pytsign_notebook_file7s scCs;|jj|ƒrd|GHnd|GH|jj|ƒdS(s"Sign a notebook that's been loadedsNotebook already signed: %ssSigning notebook: %sN(R½R+R£(RRlRÃ((s,lib/python2.7/site-packages/nbformat/sign.pyRÂ@s  cCs,d|jjGH|jjtjdƒƒdS(s%Generate a new notebook signature keysGenerating new notebook key: %siN(R½R‹R—RPR–(R((s,lib/python2.7/site-packages/nbformat/sign.pytgenerate_new_keyHscCsÉ|jrTtjj|jjƒrFd|jjGHtj|jjƒn|jƒdS|js¤|j j dƒt t j jƒƒ}t|tƒ}|j|dƒn!x|jD]}|j|ƒq®WdS(Ns$Removing trusted signature cache: %ssReading notebook from stdins(R¸RPRR‘R½RAtremoveRÅt extra_argsRNtdebugRtsyststdinRRRRÂRÄ(Rtnb_sRlRÃ((s,lib/python2.7/site-packages/nbformat/sign.pytstartMs   (R"R#Rtversiont descriptionRR¼texamplest trust_flagstflagsR R:R]R<R¸RRtR½R¿RÄRÂRÅRÌ(((s,lib/python2.7/site-packages/nbformat/sign.pyR¹s      t__main__(AR$R”t collectionsRt contextlibRRR…R¡RR’RPRÉRGt ImportErrort pysqlite2RR2tipython_genutils.py3compatRRRt traitletsRR R R R R RRRRttraitlets.configRRtjupyter_core.applicationRRRŒRRRRtalgorithms_guaranteedR·tat startswithtAttributeErrorRtobjectR&R.R=RaRoRsRtR<RÐRŸR¹tlaunch_instancetmainR"(((s,lib/python2.7/site-packages/nbformat/sign.pytsT       F" ,   &  ×  D