From 6b4bb7cdbae1d07e765fe643870b2eaeb0ba5ec7 Mon Sep 17 00:00:00 2001
From: jesopo
Date: Wed, 6 Feb 2019 08:50:19 +0000
Subject: Type annotate scram.py and don't pass base64 data to scram.py
 functions

---
 modules/sasl/scram.py | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

(limited to 'modules/sasl/scram.py')

diff --git a/modules/sasl/scram.py b/modules/sasl/scram.py
index 65dfa790..2ac402e1 100644
--- a/modules/sasl/scram.py
+++ b/modules/sasl/scram.py
@@ -1,4 +1,4 @@
-import base64, enum, hashlib, hmac, uuid
+import base64, enum, hashlib, hmac, typing, uuid
 
 def _scram_nonce():
     return uuid.uuid4().hex.encode("utf8")
@@ -30,26 +30,25 @@ class SCRAM(object):
         self._salted_password = None
         self._auth_message = None
 
-    def _get_data(self, message):
-        data = base64.b64decode(message)
-        return data, dict(piece.split(b"=", 1) for piece in data.split(b","))
+    def _get_pieces(self, data: bytes) -> typing.Dict[bytes, bytes]:
+        return dict(piece.split(b"=", 1) for piece in data.split(b","))
 
-    def _hmac(self, key, msg):
+    def _hmac(self, key: bytes, msg: bytes) -> bytes:
         return hmac.digest(key, msg, self._algo)
-    def _hash(self, msg):
+    def _hash(self, msg: bytes) -> bytes:
         return hashlib.new(self._algo, msg).digest()
 
-    def client_first(self):
+    def client_first(self) -> bytes:
         self.state = SCRAMState.ClientFirst
         # start SCRAM handshake
         self._client_first = b"n=%s,r=%s" % (
             _scram_escape(self._username), _scram_nonce())
         return b"n,,%s" % self._client_first
 
-    def server_first(self, message):
+    def server_first(self, data: bytes) -> bytes:
         self.state = SCRAMState.ClientFinal
 
-        data, pieces = self._get_data(message)
+        pieces = self._get_pieces(data)
         # server-first-message
         nonce = pieces[b"r"]
         salt = base64.b64decode(pieces[b"s"])
@@ -74,9 +73,9 @@ class SCRAM(object):
 
         return auth_noproof + (b",p=%s" % client_proof)
 
-    def server_final(self, message):
+    def server_final(self, data: bytes) -> bytes:
         # server-final-message
-        data, pieces = self._get_data(message)
+        pieces = self._get_pieces(data)
         verifier = pieces[b"v"]
 
         server_key = self._hmac(self._salted_password, b"Server Key")
-- 
cgit v1.3.1-10-gc9f91