如何签署请求令牌？

Question

我目前正在尝试编写一个脚本来发送请求令牌，我有标头和声明集，但我不理解签名！ OAuth 要求我的私钥使用 SHA256withRSA（也称为带有 SHA-256 哈希函数的 RSASSA-PKCS1-V1_5-SIGN）加密，但我能找到的最接近的是 RSAES-PKCS1-v1_5（具有 RSA，并且 SHA- 256 哈希）。我按照这个例子进行了调整，所以我可以设置它，但这是我的困境： 签名 = "" h = SHA.new（签名）

key = RSA.importKey(open('C:\Users\Documents\Library\KEY\My Project 905320c6324f.json').read())
cipher = PKCS1_v1_5.new(key)
ciphertext = cipher.encrypt(message+h.digest())
print(ciphertext)

我有点迷茫，我得到的 JSON 文件既有公钥又有私钥，我是否将私钥复制并粘贴到签名变量中（它给了我无效的语法）？或者我是否再次通过目录？我迷路了，我的头晕了哈哈。我目前正在运行 Python 3.4，使用 pyCrypto 作为签名。

Answer 1

根据您在下面所说的想要使用 gmail 编写命令系统的内容，我编写了一个简单的脚本来使用 IMAP 执行此操作。我认为这可能比尝试为单个用户使用 Google API 更简单，除非您只是为了练习而这样做。

import imaplib, logging
from time import sleep

USERNAME = 'YOUR_USERNAME_HERE' # For gmail, this is your full email address.
PASSWORD = 'YOUR_PASSWORD_HERE'
CHECK_DELAY = 60 # In seconds

LOGGING_FORMAT = '%(asctime)s %(message)s'
logging.basicConfig(filename='imapTest.log', format=LOGGING_FORMAT, level=logging.INFO)

logging.info("Connecting to IMAP server...")
imap = imaplib.IMAP4_SSL('imap.gmail.com')
imap.login(USERNAME, PASSWORD)
logging.info("Connected to IMAP server.")

def get_command_messages():
    logging.info("Checking for new commands.")
    imap.check()
    # Search the inbox (server-side) for messages containing the subject 'COMMAND' and which are from you.
    # Substitute USERNAME below for the sending email address if it differs.
    typ, data = imap.search(None, '(FROM "%s" SUBJECT "COMMAND")' %(USERNAME))
    return data[0]

def delete_messages(message_nums):
    logging.info("Deleting old commands.")
    for message in message_nums.split():
        imap.store(message, '+FLAGS', '\\DELETED')
    imap.expunge()

# Select the inbox
imap.select()

# Delete any messages left over that match commands, so we are starting 'clean'.
# This probably isn't the nicest way to do this, but saves checking the DATE header.
message_nums = get_command_messages()
delete_messages(message_nums)

try:
    while True:
        sleep(CHECK_DELAY)
        # Get the message body and sent time. Use BODY.PEEK instead of BODY if you don't want to mark the message as read, but we're deleting it anyway below.
        message_nums = get_command_messages()
        if message_nums:
            # search returns space-separated message IDs, but we need them comma-separated for fetch.
            typ, messages = imap.fetch(message_nums.replace(' ', ','), '(BODY[TEXT])')
            logging.info("Found %d commands" %(len(messages[0])))
            for message in messages[0]:
                # You now have the message body in the message variable.
                # From here, you can check against it to perform commands, e.g:
                if 'shutdown' in message:
                    print("I got a shutdown command!")
                    # Do stuff
            delete_messages(message_nums)
finally:
    try:
        imap.close()
    except:
        pass
    imap.logout()

但是，如果您打算使用 Gmail API，Google 强烈建议您使用他们现有的 Python 库，而不是像看起来那样尝试自己进行完整的身份验证等。有了这个，它应该或多或少地是用相关的 Gmail API 替换上面的 imap 调用的情况。