[c#ddlZddlZddlmZddlmZmZmZmZm Z ddl m Z m Z m Z mZddlmZmZmZmZddlmZmZGdd ZeZejZejZejZejZejZejZdS) N)Mapping)AnyDictListOptionalType) Algorithmget_default_algorithms has_cryptorequires_cryptography) DecodeErrorInvalidAlgorithmErrorInvalidSignatureErrorInvalidTokenError)base64url_decodebase64url_encodeceZdZdZddZedZdZdZdZ dd e d e d e e d e e de eejdede fdZ d de d e de ee de e de e de e eff dZ d!de d e de ee de e de f dZdZdZ d"dZdZdZdS)#PyJWSJWTNc6t|_|t|nt|j|_t |jD]}||jvr|j|=|i}i|||_dS)N)r _algorithmsset _valid_algslistkeys_get_default_optionsoptions)self algorithmsrkeys +lib/python3.11/site-packages/jwt/api_jws.py__init__zPyJWS.__init__s133) PC OOO3t?O;P;P  (--//00 * *C$** *$S)  GA$3355AA c ddiS)Nverify_signatureTr'r$r"rzPyJWS._get_default_options's "D))r$c||jvrtdt|tst d||j|<|j|dS)zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r ValueError isinstancer TypeErrorradd)ralg_idalg_objs r"register_algorithmzPyJWS.register_algorithm+sp T% % A?@@ @'9-- A?@@ @#*  V$$$$$r$cz||jvrtd|j|=|j|dS)z Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)rKeyErrorrremove)rr-s r"unregister_algorithmzPyJWS.unregister_algorithm8sU ) ) 1   V $ '''''r$c*t|jS)zM Returns a list of supported values for the 'alg' parameter. )rr)rs r"get_algorithmszPyJWS.get_algorithmsFsD$%%%r$HS256Fpayloadr! algorithmheaders json_encoderis_payload_detachedreturncg}|d}|r:|d}|r|d}|d} | durd}|j|d} |r*||| || ds| d=|rd| d<nd| vr| d=t j| d| } |t| |r|} nt|} || d |} |j |}| |}| | |}nF#t$r9}ts|tvrt!d |d |t!d |d}~wwxYw|t||rd|d<d |}|dS)Nnonealgb64FT)typr?rA),:) separatorscls.z Algorithm 'z9' could not be found. Do you have cryptography installed?Algorithm not supportedr$r utf-8)get header_typ_validate_headersupdatejsondumpsencodeappendrjoinr prepare_keysignr1r r NotImplementedErrordecode)rr7r!r8r9r:r;segments headers_alg headers_b64header json_header msg_payload signing_inputr. signatureeencoded_strings r"rOz PyJWS.encodeLsc  I  +!++e,,K +#EN !++e,,Ke# +&*#;;  #  " "7 + + + MM' " " "e} u  !F5MM f_ u j z|   &((  (55666  4!KK*733K $$$ (++  H&y1G%%c**C ]C88II H H H )/D"D )f)fff&&?@@a G  H (33444  HQK8,,$$W---s8E F 4FFjwtr rdetached_payloadc |i}i|j|}|d}|r|std||\} } } } | dddurD|td|} d| ddd | g} |r|| | | ||| | | d S) Nr&z\It is required that you pass in a value for the "algorithms" argument when calling decode().r@TFzIt is required that you pass in a value for the "detached_payload" argument to decode a message having the b64 header set to false.rFr r)r7rYr])rr_loadrIrQrsplit_verify_signature) rrar!r rrbkwargsmerged_optionsr&r7r\rYr]s r"decode_completezPyJWS.decode_completes  G4DL4G4)*<=  J n 59JJsOO1 ::eT " "e + S !Z'G II}';';D!'D'DQ'G&QRRM  V  " "=&)S* U U U"   r$c 4|j||||fi|}|dS)Nr7)ri)rrar!r rrgdecodeds r"rUz PyJWS.decodes/'$&sCWOOOOy!!r$cf||d}|||S)zReturns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete )rdrK)rrar9s r"get_unverified_headerzPyJWS.get_unverified_headers1 **S//!$ w'''r$ct|tr|d}t|tst dt |dd\}}|dd\}}n"#t$r}t d|d}~wwxYw t|}n.#ttj f$r}t d|d}~wwxYw tj |}n%#t$r} t d| | d} ~ wwxYwt|tst d t|} n.#ttj f$r}t d |d}~wwxYw t|} n.#ttj f$r}t d |d}~wwxYw| ||| fS) NrHz$Invalid token type. Token must be a rFr zNot enough segmentszInvalid header paddingzInvalid header string: z,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r*strrObytesrresplitr)rr+binasciiErrorrMloadsr) rrar\crypto_segmentheader_segmentpayload_segmenterr header_datarYr^r7r]s r"rdz PyJWS._loads0 c3   &**W%%C#u%% NLULLMM M >,/JJtQ,?,? )M>.;.A.A$.J.J +NOO > > >344# = > A*>::KK8>* A A A677S @ A DZ ,,FF D D D;;;<* B B B788c A B A(88II8>* A A A677S @ A ::sx2B B*B%%B*.B>>C)C$$C)-D D$ DD$ EF2FF FG1GGc0|d}|||vrtd |j|}||}||||st ddS#t $r}td|d}~wwxYw)Nr?z&The specified alg value is not allowedzSignature verification failedrG)rIrrrRverifyrr1) rr\rYr]r!r r?r.r^s r"rfzPyJWS._verify_signaturesjj  Rc&; R'(PQQ Q J&s+G%%c**C>>-i@@ M+,KLLL M M J J J'(ABB I JsAA66 BBBcHd|vr||ddSdS)Nkid) _validate_kid)rr9s r"rKzPyJWS._validate_headerss7 G  /   wu~ . . . . . / /r$cNt|tstddS)Nz(Key ID header parameter must be a string)r*rpr)rr~s r"rzPyJWS._validate_kids0#s## P#$NOO O P Pr$)NN)r6NNF)r`NNN)r`NN)r`N)__name__ __module__ __qualname__rJr# staticmethodrr/r3r5rqrprrrrM JSONEncoderboolrOrrrirUrnrdrfrKrr'r$r"rrsDJ B B B B**\* % % % ( ( (&&&$+"&9=$)J.J.J.J.C= J. $ J. tD$456 J."J. J.J.J.J.^*."&,0 $ $ $ $ T#Y' $ $ $ #5/ $  c3h$ $ $ $ R*."& " "  " "T#Y' " $ "  " " " "   $;$;$;V  JJJJ0///PPPPPr$r)rsrMcollections.abcrtypingrrrrrr r r r r exceptionsrrrrutilsrrr_jws_global_objrOrirUr/r3rnr'r$r"rsd ######22222222222222  65555555CPCPCPCPCPCPCPCPL%''  !1  $7&;'=r$