golden hour

/usr/lib/python3/dist-packages/pymacaroons/caveat_delegates

File/Folder	Size	Actions
__init__.py	561 B
__pycache__	-
base_first_party.py	754 B
base_third_party.py	1.13 KB
encrypted_first_party.py	2.01 KB
first_party.py	1.65 KB
third_party.py	3.42 KB

Edit: encrypted_first_party.py

from __future__ import unicode_literals
import binascii

from six import iteritems
from pymacaroons.field_encryptors import SecretBoxEncryptor

from .first_party import (
    FirstPartyCaveatDelegate, FirstPartyCaveatVerifierDelegate
)

class EncryptedFirstPartyCaveatDelegate(FirstPartyCaveatDelegate):

def __init__(self, field_encryptor=None, *args, **kwargs):
        self.field_encryptor = field_encryptor or SecretBoxEncryptor()
        super(EncryptedFirstPartyCaveatDelegate, self).__init__(
            *args, **kwargs
        )

def add_first_party_caveat(self, macaroon, predicate, **kwargs):
        if kwargs.get('encrypted'):
            predicate = self.field_encryptor.encrypt(
                binascii.unhexlify(macaroon.signature_bytes),
                predicate
            )
        return super(EncryptedFirstPartyCaveatDelegate,
                     self).add_first_party_caveat(macaroon,
                                                  predicate,
                                                  **kwargs)

class EncryptedFirstPartyCaveatVerifierDelegate(
        FirstPartyCaveatVerifierDelegate):

def __init__(self, field_encryptors=None, *args, **kwargs):
        secret_box_encryptor = SecretBoxEncryptor()
        self.field_encryptors = dict(
            (f.signifier, f) for f in field_encryptors
        ) if field_encryptors else {
            secret_box_encryptor.signifier: secret_box_encryptor
        }
        super(EncryptedFirstPartyCaveatVerifierDelegate, self).__init__(
            *args, **kwargs
        )

def verify_first_party_caveat(self, verifier, caveat, signature):
        predicate = caveat.caveat_id_bytes

for signifier, encryptor in iteritems(self.field_encryptors):
            if predicate.startswith(signifier):
                predicate = encryptor.decrypt(
                    signature,
                    predicate
                )

caveat_met = sum(callback(predicate)
                         for callback in verifier.callbacks)
        return caveat_met