Python网络编程基础 ❹ hmac的检验客户端合法性 socketserver模块

1、hmac模块验证客户端合法性

　　1）demo

import hmac

# hmac模块使用演示

secret_key = b'hongsun'
content = b'hello python hmac'
h = hmac.new(secret_key,content)
digest = h.digest()

print(digest)
'''
密文：
b'\xf4\xd7!\xf7\xaeaI\xb0\x1c\xca\x17R\xac\xe6\xc5\xad'
'''

result = hmac.compare_digest(digest, b'\xf4\xd7!\xf7\xaeaI\xb0\x1c\xca\x17R\xac\xe6\xc5\xad')
print('是不是一样？', result)

　　2）实际测试

　　　　（1）服务器端

import socket,hmac,os

secret_key = b'funyou'


def check_conn(conn):
    msg = os.urandom(32)
    conn.send(msg)
    h = hmac.new(secret_key, msg)
    code = h.digest()
    re_code = conn.recv(1024)
    return hmac.compare_digest(code, re_code)


sk = socket.socket()
sk.bind(('127.0.0.1', 8888))
sk.listen()
conn, addr = sk.accept()

if check_conn(conn):
    print('合法的客户端！')
else:
    print('不合法的客户端！')

conn.close()
sk.close()

　　　　（2）客户端

import socket,hmac,os

secret_key = b'funyou'


def check_conn(conn):
    msg = os.urandom(32)
    conn.send(msg)
    h = hmac.new(secret_key, msg)
    code = h.digest()
    re_code = conn.recv(1024)
    return hmac.compare_digest(code, re_code)


sk = socket.socket()
sk.bind(('127.0.0.1', 8888))
sk.listen()
conn, addr = sk.accept()

if check_conn(conn):
    print('合法的客户端！')
else:
    print('不合法的客户端！')

conn.close()
sk.close()

 

2、socketserver模块

　1）、demo：服务器端

import socketserver


class ServerDemo(socketserver.BaseRequestHandler):
    def handle(self):
        while 1:
            msg = self.request.recv(1024).decode('utf-8')
            print(msg)
            if msg == 'q':
                self.request.send(b'q')
                self.request.close()
                break
            ipt = input('>>>').encode('utf-8')
            self.request.send(ipt)
        print('阻塞在此') # 因为是多线程的，而且开启了永久服务！

if __name__ == '__main__':
    server = socketserver.ThreadingTCPServer(('127.0.0.1', 8888), ServerDemo)
    server.serve_forever()

客户端代码

import socket

sk = socket.socket()
sk.connect(('127.0.0.1', 8888))
while 1:
    ipt = input('>>>').encode('utf-8')
    sk.send(ipt)
    msg = sk.recv(1024).decode('utf-8')
    if msg == 'q':
        sk.send(b'q')
        break
    print(msg)

sk.close()

　　2）、应用：socketserver模拟登陆

　　　　（1）服务器端

import socketserver,struct,json

'''
登录服务器
'''

class LoginServer(socketserver.BaseRequestHandler):

    def check_login(self, name, pwd):
        '''
        检验登录是否合法
        :param name: 用户名
        :param pwd: 密文密码
        :return: 是否合法
        '''
        with open('user_info', encoding='utf-8') as f:
            lines = f.readlines()
            for line in lines:
                info_li = line.split('|')
                if info_li[0] == name and info_li[1] == pwd:
                    return True
                else:
                    return False

    def handle(self):
        while 1:
            length_msg = self.request.recv(4)
            length = struct.unpack('i', length_msg)[0]
            print(length)
            data = self.request.recv(length).decode('utf-8')
            content = json.loads(data)
            print(data)
            result = self.check_login(content[ 'name' ], content[ 'pwd' ])
            print(result)
            if result:
                self.request.send(b'1')
                break
            else:
                self.request.send(b'0')
                continue

if __name__ == '__main__':
    server = socketserver.ThreadingTCPServer(('127.0.0.1', 8080), LoginServer)
    server.serve_forever()

　　　　（2）客户端

import socket, hashlib, json, struct

sk = socket.socket()
sk.connect(('127.0.0.1', 8080))


def login(name, pwd):
    '''
    发送登录数据给服务器
    :param name: 用户输入的密码
    :param pwd: 用户输入的密码
    :return: 是否登录成功
    '''
    # 先使用摘要算法加密密码
    md5 = hashlib.md5()
    md5.update(pwd.encode('utf-8'))
    secret_pwd = md5.hexdigest()

    # 将要传送的数据打包成字典
    data = {'name': name, "pwd": secret_pwd}

    # 使用json序列化数据包
    data_json = json.dumps(data)

    # 使用struct将数据包长度发送过去，避免黏包
    data_length = struct.pack('i', len(data_json))
    sk.send(data_length)
    sk.send(data_json.encode('utf-8'))

    result = sk.recv(4).decode('utf-8')
    if result == '1':
        return True
    else:
        return False


while 1:
    name = input('请输入登录名：》》》').strip()
    pwd = input('请输入登录密码：》》》').strip()

    if login(name, pwd):
        print('登陆成功，可以发数据了！')
        break
    else:
        print('登陆失败，请重新登录！')
        continue

sk.close()

　　　　（3）读取的数据 user_info

tom|202cb962ac59075b964b07152d234b70|teacher
jack|250cf8b51c773f3f8dc8b4be867a9a02|admin
cindy|250cf8b51c773f3f8dc8b4be867a9a02|student