OwlCyberSecurity - MANAGER
Edit File: applepush.pyc
� �t�ac @ s� d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z m Z d d l m Z m Z d d l! m" Z" m# Z# d d l$ m% Z% d d l& Z& d d l' Z' d d l( Z( d d l) Z) d d l* m+ Z+ d d l, m- Z- d d l. m/ Z/ m0 Z0 m1 Z1 d d l2 m3 Z3 d d l4 m5 Z5 d d l6 m7 Z7 m8 Z8 e � Z9 d e7 f d � � YZ: d e j; f d � � YZ< d e f d � � YZ= d e f d � � YZ> d! e j? f d" � � YZ@ d# e@ f d$ � � YZA d% e f d& � � YZB d' e f d( � � YZC d) e@ f d* � � YZD d+ e% e# e" f d, � � YZE d- e e e jF � f d. � � YZG d S(/ i����( t ChainingOpenSSLContextFactory( t Logger( t fromTable( t RegeneratingWorkItem( t schema( t responsecode( t element( t NonePropertyStore( t Response( t MimeType( t parsePOSTData( t service( t Protocol( t inlineCallbackst returnValuet succeed( t ClientFactoryt ReconnectingClientFactory( t DAVResourcet DAVResourceWithoutChildrenMixin( t ReadOnlyNoCopyResourceMixInN( t InvalidSubscriptionValues( t PushPriority( t validTokent TokenHistoryt PushScheduler( t connect( t GAIEndpoint( t Valuest ValueConstantt ApplePushPriorityc B sD e Z d Z e e j j � Z e e j j � Z e e j j � Z RS( sS Maps calendarserver.push.util.PushPriority values to APNS-specific values ( t __name__t __module__t __doc__R R t lowt valuet mediumt high( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR 2 s t ApplePushNotifierServicec B sV e Z d Z e � Z e d d d � � Z d � Z d � Z e d e j d � � Z RS( s� ApplePushNotifierService is a MultiService responsible for setting up the APN provider and feedback connections. Once connected, calling its enqueue( ) method sends notifications to any device token which is subscribed to the enqueued key. The Apple Push Notification protocol is described here: https://developer.apple.com/library/ios/documentation/NetworkingInternet/Conceptual/RemoteNotificationsPG/Chapters/CommunicatingWIthAPS.html c C s� | � } | | _ i | _ i | _ d | _ | d | _ | d | _ x�d D]�} | | j rN d } d } | d k r� | � } | � } n t | j | d | d | | d | | d d | | d d | | d d | | d d | d d | d d | d | �} | j | � | | j | <| j j d d | d | | d �t | j | d | d | d | | d | | d d | | d d | | d d | | d d | d | �} | j | � | | j | <qN qN W| S( s Creates the various "subservices" that work together to implement APN, including "provider" and "feedback" services for CalDAV and CardDAV. @param settings: The portion of the configuration specific to APN @type settings: C{dict} @param store: The db store for storing/retrieving subscriptions @type store: L{IDataStore} @param testConnectorClass: Used for unit testing; implements connect( ) and receiveData( ) @type testConnectorClass: C{class} @param reactor: Used for unit testing; allows tests to advance the clock in order to test the feedback polling service. @type reactor: L{twisted.internet.task.Clock} @return: instance of L{ApplePushNotifierService} t SubscriptionPurgeIntervalSecondst SubscriptionPurgeSecondst CalDAVt CardDAVt ProviderHostt ProviderPortt CertificatePatht PrivateKeyPatht chainPatht AuthorityChainPatht passphraset Passphraset keychainIdentityt KeychainIdentityt staggerNotificationst EnableStaggeringt staggerSecondst StaggerSecondst testConnectort reactors APNS {proto} topic: {topic}t protot topict Topict FeedbackUpdateSecondst FeedbackHostt FeedbackPortN( R) R* ( t storet providerst feedbackst Nonet purgeCallt purgeIntervalSecondst purgeSecondst Enabledt APNProviderServicet setServiceParentt logt infot APNFeedbackService( t clst settingsRA t testConnectorClassR: R t protocolt providerTestConnectort feedbackTestConnectort providert feedback( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt makeServiceH s^ c C s< | j j d � | j t _ | j t _ t j j | � d S( s� In addition to starting the provider and feedback sub-services, start a LoopingCall whose job it is to purge old subscriptions s% ApplePushNotifierService startServiceN( RK t debugRG t APNPurgingWorkRF R t MultiServicet startService( t self( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRZ � s c C s$ | j j d � t j j | � d S( sn In addition to stopping the provider and feedback sub-services, stop the LoopingCall s$ ApplePushNotifierService stopServiceN( RK RW R RY t stopService( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR\ � s c c s y | j d � d } Wn( t k rA | j j d d | �d SX| d k rc t t j � � } n | j j | d � } | d k r| j | � V} t | � } | d k r| j j d d | d | �g | D]! } | j r� | j r� | j ^ q� } | r| j | | | | � qqn d S( sR Sends an Apple Push Notification to any device token subscribed to this pushKey. @param pushKey: The identifier of the resource that was updated, including a prefix indicating whether this is CalDAV or CardDAV related. "/CalDAV/abc/def/" @type pushKey: C{str} @param dataChangedTimestamp: Timestamp (epoch seconds) for the data change which triggered this notification (Only used for unit tests) @type key: C{int} @param priority: the priority level @type priority: L{PushPriority} t /i s$ Push key '{key}' is missing protocolt keyNi s* Sending {num} APNS notifications for {key}t num( t splitt ValueErrorRK t errorRD t intt timeRB t gett apnSubscriptionsByKeyt lenRW t tokent subscriberGUIDt scheduleNotifications( R[ t transactiont pushKeyt dataChangedTimestampt priorityRQ RT t subscriptionst numSubscriptionst recordt tokens( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt enqueue� s( .N( R R R! R RK t classmethodRD RV RZ R\ R R R% Rs ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR& ; s R t APNProviderProtocolc B s� e Z d Z e � Z d Z d Z i d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6d d 6Z d Z d Z d � Z d � Z d d � Z e d d � � Z e d � � Z d � Z RS( s1 Implements the Provider portion of APNS i i s No errors encounteredi s Processing errori s Missing device tokens Missing topici s Missing payloadi s Invalid token sizei s Invalid topic sizei s Invalid payload sizei s Invalid tokens None (unknown)i� c C s0 t � | _ | j j d � t j | | � d S( Ns ProviderProtocol makeConnection( R t historyRK RW R t makeConnection( R[ t transport( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRw s c C s6 | j j d � d | _ | | j _ | j j � d S( Ns ProviderProtocol connectionMadet ( RK RW t buffert factoryt connectiont clientConnectionMade( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt connectionMade s c C s d | j _ d S( N( RD R{ R| ( R[ t reason( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt connectionLost s c c s | d k r | j } n | j j d d t | � �| j | 7_ x� t | j � | j k r� | j | j } | j | j | _ y? t j d | � \ } } } | | j k r� | | | � Vn WqF t k r� } | j j d d | j d � d | �qF XqF Wd S( sn Buffer and divide up received data into error messages which are always 6 bytes long s) ProviderProtocol dataReceived {len} bytesRg s !BBIs7 ProviderProtocol could not process error: {code} ({ex})t codet hext exN( RD t processErrorRK RW Rg Rz t MESSAGE_LENGTHt structt unpackt COMMAND_ERRORt Exceptiont warnt encode( R[ t datat fnt messaget commandt statust identifiert e( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt dataReceived s c c s� | j j | d � } | j j d d | d | d | �| | j k r� | j j | � } | d k r� | j j d d | �| j j j d d � } | j | � V} xA | D]9 } | j j d d | d | j �| j | | j � Vq� W| j � Vq� n d S( s� Handles an error message we've received on the provider channel. If the error code is one that indicates a bad token, remove all subscriptions corresponding to that token. @param status: The status value returned from APN Feedback server @type status: C{int} @param identifier: The identifier of the outbound push notification message which had a problem. @type status: C{int} s Unknown status codes5 Received APN error {status} on identifier {id}: {msg}R� t idt msgs- Removing subscriptions for bad token: {token}Rh t labels APNProviderProtocol.processErrors$ Removing subscription: {token} {key}R^ N( t STATUS_CODESRe RK RL t TOKEN_REMOVAL_CODESRv t extractIdentifierRD RW R{ RA t newTransactiont apnSubscriptionsByTokent resourceKeyt removeAPNSubscriptiont commit( R[ R� R� R� Rh t txnRo Rq ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� 1 s " c C s� | o | o | s d Sy | j d d � j d � } Wn | j j d d | �d SXt | � } | j j | � } t j | j � j } t j i | d 6| d 6t t j � � d 6� } t | � } | j j d d | d | d | d | �| j } d | d d | d d d d d d d d d } | j j t j d | | f | | d | | d | | d d | d d t t j � � d d d | � � d S( s� Sends a push notification message for the key to the device associated with the token. @param token: The device token subscribed to the key @type token: C{str} @param key: The key we're sending a notification about @type key: C{str} @param dataChangedTimestamp: Timestamp (epoch seconds) for the data change which triggered this notification @type key: C{int} Nt Ry R� s& Invalid APN token in database: {token}Rh R^ Rm t pushRequestSubmittedTimestampsS Sending APNS notification to {token}: id={id} payload={payload} priority={priority}R� t payloadRn i i i s !BIBH%dsBH%dsBHIBHIBHBi iH i< i i i� i�� ( t replacet decodeRK Rb Rg Rv t addR t lookupByValueR# t jsont dumpsRc Rd RW t COMMAND_PROVIDERRx t writeR� t pack( R[ Rh R^ Rm Rn t binaryTokent tokenLengthR� t apnsPriorityR� t payloadLengthR� t frameLength( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt sendNotificationR sT 3 ( i i N( R R R! R RK R� R� R� R� R� Rw R~ RD R� R R� R� R� ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRu � s0 !t APNProviderFactoryc B sP e Z e � Z e Z d � Z d � Z d � Z d � Z d d � Z d � Z RS( c C s1 | | _ | | _ t | _ d | _ t | _ d S( Ni ( R RA t Truet noisyt maxDelayt Falset shuttingDown( R[ R RA ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt __init__� s c C s* | j j d � | j j � d | _ d S( Ns Connection to APN server madeg �?( RK RL R R} t delay( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR} � s c C sn | j sW | j j d d | �| j t j j k rW | j j d � t j | � qW n t j | | | � d S( Ns' Connection to APN server lost: {reason}R s& Ensure APNS certificate is not expired( R� RK Rb t typet OpenSSLt SSLt ErrorR t stopTryingt clientConnectionLost( R[ t connectorR ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s c C s6 | j j d d | �t | _ t j | | | � d S( Ns) Unable to connect to APN server: {reason}R ( RK Rb R� t connectedR t clientConnectionFailed( R[ R� R ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s c C s$ | j j d � t j | | � d S( Ns Reconnecting to APN server( RK RL R t retry( R[ R� ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s c C s t | _ t j | � d S( N( R� R� R R� ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s N( R R R RK Ru RQ R� R} R� R� RD R� R� ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s t APNConnectionServicec B s5 e Z e � Z d d d d d d d � Z d � Z RS( Ry t TLSv1_METHODc C s} | | _ | | _ | | _ | | _ | | _ | | _ | | _ | | _ | | _ | d k rp d d l m } n | | _ d S( Ni����( R: ( t hostt portt certPatht keyPathR/ R1 R3 t sslMethodR9 RD t twisted.internetR: ( R[ R� R� R� R� R/ R1 R3 R� R9 R: ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s c s� � j d k r% � j j � | � n� � j r@ � f d � } n d } t � j � j d � j d | d � j d t t j � j � d � j �} t t � j � j � j | � | � d S( Nc s � j S( N( R1 ( t ignored( R[ ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt <lambda> Ry t certificateChainFilet passwdCallbackR3 t sslmethodt peerName( R9 RD R R1 R R� R� R/ R3 t getattrR� R� R� R� R R: R� ( R[ R{ R� t context( ( R[ s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR � s N( R R R RK RD R� R ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s RI c B s_ e Z d d d d e d d d d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( Ry R� i c C s� t j | | | | | d | d | d | d | d | d | �| | _ d | _ g | _ | r t | j | j d | �| _ n d | _ d S( NR/ R1 R3 R� R9 R: R7 ( R� R� RA RD R{ t queueR R: R� t scheduler( R[ RA R� R� R� R� R/ R1 R3 R� R5 R7 R9 R: ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� s c C sB | j j d � t | | j � | _ | j j | j | j � d S( Ns APNProviderService startService( RK RW R� RA R{ R: t callWhenRunningR ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRZ . s c C sR | j j d � | j d k r/ | j j � n | j d k rN | j j � n d S( Ns APNProviderService stopService( RK RW R{ RD R� R� t stop( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR\ 3 s c C sy | j ru t | j � } g | _ xQ | D]F \ \ } } } } | r( | r( | r( | r( | j | | | | � q( q( Wn d S( N( R� t listR� ( R[ t queuedRh R^ Rm Rn ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR} : s c C s� t | j d d � } | d k rv | j d k rL | j j | | | | � q� x= | D] } | j | | | | � qS Wn | j | | | | � d S( s� The starting point for getting notifications to the APNS server. If there is a connection to the APNS server, these notifications are scheduled (or directly sent if there is no scheduler). If there is no connection, the notifications are saved for later. @param tokens: The device tokens to schedule notifications for @type tokens: List of strings @param key: The key to use for this batch of notifications @type key: String @param dataChangedTimestamp: Timestamp (epoch seconds) for the data change which triggered this notification @type key: C{int} R| N( R� R{ RD R� t scheduleR� t _saveForWhenConnected( R[ Rr R^ Rm Rn R| Rh ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRj G s c C s� x� | D]� } | | f } x� | j D]; \ } } } | | k r# | j j d d | d | �Pq# q# W| j j d d | d | �| j j | | f | | f � q Wd S( sU Called in order to save notifications that can't be sent now because there is no connection to the APNS server. (token, key) tuples are appended to the queue which is serviced during clientConnectionMade() @param tokens: The device tokens to schedule notifications for @type tokens: List of C{str} @param key: The key to use for this batch of notifications @type key: C{str} @param dataChangedTimestamp: Timestamp (epoch seconds) for the data change which triggered this notification @type key: C{int} sG APNProviderService has no connection; skipping duplicate: {token} {key}Rh R^ s< APNProviderService has no connection; queuing: {token} {key}N( R� RK RW t append( R[ Rr R^ Rm Rn Rh t tokenKeyPairt existingPairt _ignore_timstamp( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� a s c C ss | o | o | | f s d St | j d d � } | d k rY | j | g | | | � n | j | | | | � d S( s� If there is a connection the notification is sent right away, otherwise the notification is saved for later. @param token: The device token to send a notifications to @type token: C{str} @param key: The key to use for this notification @type key: C{str} @param dataChangedTimestamp: Timestamp (epoch seconds) for the data change which triggered this notification @type key: C{int} NR| ( R� R{ RD R� R� ( R[ Rh R^ Rm Rn R| ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� y s N( R R R� RD R� RZ R\ R} Rj R� R� ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRI s t APNFeedbackProtocolc B sG e Z d Z e � Z d Z d � Z e d d � � Z e d � � Z RS( s1 Implements the Feedback portion of APNS i c C s | j j d � d | _ d S( Ns FeedbackProtocol connectionMadeRy ( RK RW Rz ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR~ � s c c sE | d k r | j } n | j j d d t | � �| j | 7_ x� t | j � | j k r@| j | j } y� t j d | � \ } } | j | } t | j � | k r t j d | f | j | j | !� } | d j d � j � } | | | � V| j | | _ n d SWqF t k r<} | j j d d | �d SXqF Wd S( s� Buffer and divide up received data into feedback messages. Once we've received enough data and can read a device token, we call processFeedback( ) on it. s) FeedbackProtocol dataReceived {len} bytesRg s !IHs !%dsi R� Ns2 FeedbackProtocol could not process message: ({ex})R� ( RD t processFeedbackRK RW Rg Rz t PREFIX_LENGTHR� R� R� t lowerR� R� ( R[ R� R� t prefixt timestampR� t messageLengthRh R� ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s. c c s� | j j d d | d | �| j j j d d � } | j | � V} xS | D]K } | | j k rK | j j d d | d | j �| j | | j � VqK qK W| j � Vd S( s� Handles a feedback message indicating that the given token is no longer active as of the timestamp, and its subscription should be removed as long as that device has not re-subscribed since the timestamp. @param timestamp: Seconds since the epoch @type timestamp: C{int} @param token: The device token to unsubscribe @type token: C{str} s: FeedbackProtocol processFeedback time={time} token={token}Rd Rh R� s# APNFeedbackProtocol.processFeedbacks5 FeedbackProtocol removing subscription: {token} {key}R^ N( RK RW R{ RA R� R� t modifiedR� R� R� ( R[ R� Rh R� Ro Rq ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s N( R R R! R RK R� R~ R RD R� R� ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s ,t APNFeedbackFactoryc B s) e Z e � Z e Z d � Z d � Z RS( c C s | | _ d S( N( RA ( R[ RA ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s c C s6 | j j d d | �t | _ t j | | | � d S( Ns2 Unable to connect to APN feedback server: {reason}R ( RK Rb R� R� R R� ( R[ R� R ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s ( R R R RK R� RQ R� R� ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s RM c B s> e Z d d d d d d d � Z d � Z d � Z d � Z RS( Ry R� c C sS t j | | | | | d | d | d | d | d | d | �| | _ | | _ d S( NR/ R1 R3 R� R9 R: ( R� R� RA t updateSeconds( R[ RA R� R� R� R� R� R/ R1 R3 R� R9 R: ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� � s c C s9 | j j d � t | j � | _ | j j | j � d S( Ns APNFeedbackService startService( RK RW R� RA R{ R: R� t checkForFeedback( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRZ s c C s3 | j j d � | j d k r/ | j j � n d S( Ns APNFeedbackService stopService( RK RW t nextCheckRD t cancel( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR\ s c C sK d | _ | j j d � | j | j � | j j | j | j � | _ d S( Ns# APNFeedbackService checkForFeedback( RD R� RK RW R R{ R: t callLaterR� R� ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� s N( R R RD R� RZ R\ R� ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRM � s t APNSubscriptionResourcec B s� e Z d Z e � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e d � � Z e Z e d � � Z e d � � Z d d � Z RS( s� The DAV resource allowing clients to subscribe to Apple push notifications. To subscribe, a client should first determine the key they are interested in my examining the "pushkey" DAV property on the home or collection they want to monitor. Next the client sends an authenticated HTTP GET or POST request to this resource, passing their device token and the key in either the URL params or in the POST body. c C s/ t j | d | j � �| | _ | | _ d S( Nt principalCollections( R R� R� t parentRA ( R[ R� RA ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� . s c C s( t | d � s! t | � | _ n | j S( Nt _dead_properties( t hasattrR R� ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt deadProperties5 s c C s t d � S( N( R RD ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt etag: s c C s d S( N( RD ( R[ t request( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt checkPreconditions= s c C s� t t j t j t j t j � � t j t j t j � � � t j � � t j t j t j � � t j t j t j � � � t j � � � � S( N( R t davxmlt ACLt ACEt Principalt Authenticatedt Grantt Privileget Readt Protectedt Write( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt defaultAccessControlList@ s c C s t j d � S( Ns text/html; charset=utf-8( R t fromString( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt contentTypeV s c C s d S( N( RD ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt resourceTypeY s c C s t S( N( R� ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt isCollection\ s c C s t S( N( R� ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt isCalendarCollection_ s c C s t S( N( R� ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt isPseudoCalendarCollectionb s c c sX | j | t j � f � Vt | � V| j | � V\ } } t | j | d | �� d S( Nt body( t authorizeR� R R t processSubscriptionR t renderResponse( R[ R� R� R� ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt http_POSTe s c c sC | j j d d � d j d d � j � } | j j d d � d } | j j d d � } | j j } | j j d g � } | r� | d } n | o� | s� t j } d } n� t | � s� t j } d | f } n_ | j j j } y- | j | | | | | � Vt j } d } Wn t k r.t j } d } n Xt | | f � d S( s� Given an authenticated request, use the token and key arguments to add a subscription entry to the database. @param request: The request to process @type request: L{txweb2.server.Request} Rh Ry i R� R^ s user-agentt -s x-forwarded-fors8 Invalid request: both 'token' and 'key' must be provideds Invalid request: bad 'token' %ss Invalid subscription valuesN( Ry ( Ry ( t argsRe R� R� t headerst getHeadert remoteAddrR� t getRawHeadersR t BAD_REQUESTR t authnUserRq t uidt addSubscriptiont OKRD R R ( R[ R� Rh R^ t userAgentR� t fwdHeadersR� R� R ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR n s, + c c sS t t j � � } | j j d d � } | j | | | | | | � V| j � Vd S( s� Add a subscription (or update its timestamp if already there). @param token: The device token, must be lowercase @type token: C{str} @param key: The push key @type key: C{str} @param uid: The uid of the subscriber principal @type uid: C{str} @param userAgent: The user-agent requesting the subscription @type key: C{str} @param host: The host requesting the subscription @type key: C{str} R� s' APNSubscriptionResource.addSubscriptionN( Rc Rd RA R� t addAPNSubscriptionR� ( R[ Rh R^ R R R� t nowR� ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR � s c C s2 t | i | � } | j j d t d d � � | S( Ns content-typet textt html( R R t setHeaderR ( R[ R� R t response( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR � s N( R R R! R RK R� R� R� R� R R R R R R R R t http_GETR R RD R ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyR� s" 'RX c B s; e Z d Z d Z d Z e d � � Z d � Z d � Z RS( t apn_purgingi i< i i c s � f d � } | j d | � S( Nc s t j | � � S( N( RX t reschedule( R� ( t seconds( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt _enqueue� s s APNPurgingWork.initialSchedule( t inTransaction( RN RA R# R$ ( ( R# s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt initialSchedule� s c C s | j S( sP Return the interval in seconds between regenerating instances. ( RF ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt regenerateInterval� s c C s# | j j t t j � � | j � S( N( Rk t purgeOldAPNSubscriptionsRc Rd RG ( R[ ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt doWork� s i� i�� iP i�N i u ( R R t groupRF RG Rt R& R' R) ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyRX � s (H t twext.internet.sslR t twext.python.logR t twext.enterprise.dal.recordR t twext.enterprise.jobs.workitemR t! txdav.common.datastore.sql_tablesR t txweb2R t txdav.xmlR R� t txweb2.dav.nonepropsR t txweb2.httpR t txweb2.http_headersR t txweb2.serverR t twisted.applicationR t twisted.internet.protocolR t twisted.internet.deferR R R R R t twistedcaldav.extensionsR R t twistedcaldav.resourceR R� R� R� Rd t txdav.common.icommondatastoreR t calendarserver.push.ipushR t calendarserver.push.utilR R R t twext.internet.adaptendpointR t twext.internet.gaiendpointR t twisted.python.constantsR R RK R RY R& Ru R� t ServiceR� RI R� R� RM R� t APN_PURGING_WORKRX ( ( ( s0 /opt/cpanel-ccs/calendarserver/push/applepush.pyt <module> sP ��*-|Y%�