jhCjddlmZddlZddlZddlZddlmZddlmZm Z ddl m Z m Z m Z mZddlmZddlmZmZmZmZmZdd lmZmZdd lmZmZerdd l mZmZdd lmZe Z!Gd dZ"e"Z#e#j$Z$e#j%Z%e#j&Z&e#j'Z'e#j(Z(e#j)Z)e#j*Z*dS)) annotationsN)Sequence) TYPE_CHECKINGAny) Algorithmget_default_algorithms has_cryptorequires_cryptography)PyJWK) DecodeErrorInvalidAlgorithmErrorInvalidKeyErrorInvalidSignatureErrorInvalidTokenError)base64url_decodebase64url_encode)InsecureKeyLengthWarningRemovedInPyjwt3Warning)AllowedPrivateKeysAllowedPublicKeys) SigOptionsceZdZUdZ dAdBd ZedCd ZdDdZdEdZdFdZ dGdZ e ddddfdHd%Z dIdJd.Z dIdKd0ZdLd1ZdMd3Z dNdOd7Zd8hZd9ed:<dd;dPd=ZdQd?ZdRd@ZdS)SPyJWSJWTN algorithmsSequence[str] | NoneoptionsSigOptions | NonereturnNonecNt|_|t|nt|j|_t |jD]}||jvr|j|=||_|i|j||_dSdS)N)r _algorithmsset _valid_algslistkeys_get_default_optionsr)selfrrkeys 9C:\Projects\DSCons\.venv\Lib\site-packages\jwt\api_jws.py__init__zPyJWS.__init__$s 233)5C OOO3t?O;P;P  (--//00 * *C$***$S)#'#<#<#>#>  6dl6g6DLLL  rc dddS)NTF)verify_signatureenforce_minimum_key_lengthr1r-r+r(zPyJWS._get_default_options7s$(NNNr-alg_idstralg_objrc||jvrtdt|tst d||j|<|j|dS)z Registers a new Algorithm for use when creating and verifying tokens. :param str alg_id: the ID of the Algorithm :param alg_obj: the Algorithm object :type alg_obj: Algorithm z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r# ValueError isinstancer TypeErrorr%add)r)r2r4s r+register_algorithmzPyJWS.register_algorithm;sm T% % %?@@ @'9-- A?@@ @#*  V$$$$$r-cz||jvrtd|j|=|j|dS)z Unregisters an Algorithm for use when creating and verifying tokens :param str alg_id: the ID of the Algorithm :raises KeyError: if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)r#KeyErrorr%remove)r)r2s r+unregister_algorithmzPyJWS.unregister_algorithmLsS ) ) )1   V $ '''''r- list[str]c*t|jS)zh Returns a list of supported values for the `alg` parameter. :rtype: list[str] )r&r%)r)s r+get_algorithmszPyJWS.get_algorithms[s D$%%%r-alg_namec |j|S#t$r9}ts|tvrt d|d|t d|d}~wwxYw)a/ For a given string name, return the matching Algorithm object. Example usage: >>> jws_obj = PyJWS() >>> jws_obj.get_algorithm_by_name("RS256") :param alg_name: The name of the algorithm to retrieve :type alg_name: str :rtype: Algorithm z Algorithm 'z9' could not be found. Do you have cryptography installed?Algorithm not supportedN)r#r<r r NotImplementedError)r)rBes r+get_algorithm_by_namezPyJWS.get_algorithm_by_namecs H#H- - H H H (.C"C"C)e(eee&&?@@a G  Hs  A4A  AFTpayloadbytesr*(AllowedPrivateKeys | PyJWK | str | bytes algorithm str | Noneheadersdict[str, Any] | None json_encodertype[json.JSONEncoder] | Noneis_payload_detachedbool sort_headerscvg}|tur t|tr|j} n'd} n$| t|tr|j} nd} n|} |r:|d} | r|d} |d} | durd}|j| d} |r,||d| || d s| d =|rMd| d<| d g} t| tstd d| vr g| d| d <nd| vr| d=tj | d ||  }| t||r|}nt|}| |d|}|| }t|tr|j}||}||}|rF|jddrt+|t-j|t0d|||}| t||rd|d<d|}|dS)NHS256nonealgb64FT)typrWencodingrYcritz%Invalid 'crit' header: must be a list),:) separatorscls sort_keys.r0 stacklevelr-rutf-8)_ALGORITHM_UNSETr7r algorithm_nameget header_typ_validate_headersupdater&rjsondumpsencodeappendrjoinrGr* prepare_keycheck_key_lengthrrwarningswarnrsigndecode)r)rHr*rKrMrOrQrSsegments algorithm_ headers_alg headers_b64header existing_crit json_header msg_payload signing_inputr4key_length_msg signatureencoded_strings r+roz PyJWS.encodexs!# ( ( (#u%% % / $  #u%% $ / # "J  +!++e,,K ,$U^ !++e,,Ke##&*#*.!L!L  #  " "7T " : : : MM' " " "e} u  !F5M #JJvr22MmT22 Q'(OPPPM))!8=!8%!8v f__u j z||   &((  (55666  4!KK*733K $$$ (++ ,,Z88 c5 ! ! 'C!!#&& 11#66  V| tjdt|td||j}n i|j|}|d}|r&|s$t |tstd| |\} } } } | | | dddur| d pg} t | trd| vrtd |td |} d | d d d| g} |r|| | | |||| | | dS)Nzypassing additional kwargs to decode_complete() is deprecated and will be removed in pyjwt version 3. Unsupported kwargs: rcrdr/z\It is required that you pass in a value for the "algorithms" argument when calling decode().rXTFr\zAThe 'b64' header parameter requires 'b64' to be listed in 'crit'.zIt is required that you pass in a value for the "detached_payload" argument to decode a message having the b64 header set to false.rbrr)r)rHr|r)rtrutupler'rrr7r r _loadrkrir&rrqrsplit_verify_signature)r)rr*rrrrmerged_optionsr/rHrr|rr\s r+decode_completezPyJWS.decode_completes   M>',V[[]]';';>>'      ?!\NN8 88N)*<=  J z#u7M7M n 59JJsOO1  v&&& ::eT " "e + +::f%%+DdD)) U$->->'W '!Z'G II}';';D!'D'DQ'G&QRRM    " "& #   "   r-rc |r>tjdt|td||||||}|dS)Nzppassing additional kwargs to decode() is deprecated and will be removed in pyjwt version 3. Unsupported kwargs: rcrd)rrH)rtrurr'rr)r)rr*rrrrdecodeds r+rwz PyJWS.decodes   M>',V[[]]';';>>'     && j'sj c3   &**W%%C#u%% NLULLMM M >,/JJtQ,?,? )M>.;.A.A$.J.J +NOO > > >344# = > A*>::KK8>* A A A677S @ A D%)Z %<%* A A A677S @ A ::sx2B B*B%%B*.B>>C)C$$C)-D D$ DD$8FF3F..F37GG2G--G2rr|rc||n|j}|t|tr|jg} |d}n#t$rt ddwxYw|r|||vrt dt|tr4||jkrt d|d|j|j} |j} nN ||} n"#t$r} t d| d} ~ wwxYw| |} | | } | rA| ddrt| tj| t d | || |st%d dS) NrWzAlgorithm not specifiedz&The specified alg value is not allowedzToken algorithm z$ does not match the key's algorithm rDr0FrdzSignature verification failed)rr7r rhr<rrr*rGrErrrsrirrtrurverifyr) r)rr|rr*rreffective_optionsrWr4 prepared_keyrFrs r+rzPyJWS._verify_signatureps(/':GG   *S%"8"8 ,-J M-CC M M M'(ABB L M Rz-#Z2G2G'(PQQ Q c5 ! ! 4 c(((+8s88!$!388mG7LL N44S99& N N N+,EFFAM N"..s33L 11,??  V $$%A5II V%n555 n.FSTUUUU~~m\9EE I'(GHH H I Is!5A4C C)C$$C)rXzset[str]_supported_critrZr[cd|vr||d|sd|vr||dSdSdS)Nkidr\) _validate_kid_validate_crit)r)rMr[s r+rkzPyJWS._validate_headerssc G     wu~ . . . )Fg--    ( ( ( ( ( ) )--r-rcNt|tstddS)Nz(Key ID header parameter must be a string)r7r3r)r)rs r+rzPyJWS._validate_kids0#s## P#$NOO O P Pr-c:|d}t|trt|dkrtd|D]X}t|tstd||jvrtd|||vrtd|dYdS)Nr\rz/Invalid 'crit' header: must be a non-empty listz-Invalid 'crit' header: values must be stringsz Unsupported critical extension: zCritical extension 'z' is missing from headers)r7r&lenrr3r)r)rMr\exts r+rzPyJWS._validate_critsv$%% WTa#$UVV V  Cc3'' Y'(WXXX$...'(P3(P(PQQQ'!!'I3III"   r-)NN)rrrrr r!)r r)r2r3r4rr r!)r2r3r r!)r r?)rBr3r r)rHrIr*rJrKrLrMrNrOrPrQrRrSrRr r3)rNNN)rrr*rrrrrrrrrr r)rrr*rrrrrrrrrr r)rrr r)rrr r)rNN)rrIr|rrrIr*rrrrrr r!)rMrr[rRr r!)rrr r!)rMrr r!)__name__ __module__ __qualname__rjr, staticmethodr(r:r>rArGrgrorrwrrrr__annotations__rkrrr1r-r+rr!sJ,0%)77777&OOO\O%%%%" ( ( ( (&&&&HHHH2!1)-6:$)!a.a.a.a.a.L8:+/%))- @ @ @ @ @ J8:+/%))- """"",    0;0;0;0;n8:+/%)1I1I1I1I1Ih"'O''''rGrr1r-r+rs"""""" $$$$$$%%%%%%%% 65555555FFFFFFFF"AAAAAAAA!!!!!!688]]]]]]]]@ %''  !1  $7&;'='=r-