|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/jwt/__pycache__/ |
Upload File : |
o
K�jar � @ s� d dl Z d dlZd dlmZ d dlmZmZmZmZm Z ddl
m Z m Z m
Z
mZ ddlmZmZmZmZ ddlmZmZ G dd � d �Ze� ZejZejZejZej Z ej Z ej Z dS )
� N)�Mapping)�Any�Dict�List�Optional�Type� )� Algorithm�get_default_algorithms�
has_crypto�requires_cryptography)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encodec
@ s e Zd ZdZd(dd�Zedd� �Zdd� Zd d
� Zd d � Z
d)de
de de e de e
de eej de f dd�Z d*de de dee de
de
e ef f
dd�Z d*de de dee de
de f
d d �Zd d � Zd d!� Z d+d"d#�Zd$d%� Zd&d'� ZdS ),�PyJWS�JWTNc C sl t � | _|d ur t|�nt| j�| _t| j�� �D ] }|| jvr$| j|= q|d u r+i }i | �� �|�| _d S )N)r
� _algorithms�set� _valid_algs�list�keys�_get_default_options�options)�self�
algorithmsr �key� r �-/usr/lib/python3/dist-packages/jwt/api_jws.py�__init__ s �
�zPyJWS.__init__c C s ddiS )N�verify_signatureTr r r r r r ' s zPyJWS._get_default_optionsc C s> || j v r td��t|t�std��|| j |< | j�|� dS )zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r �
ValueError�
isinstancer � TypeErrorr �add)r �alg_id�alg_objr r r �register_algorithm+ s
zPyJWS.register_algorithmc C s* || j vr td��| j |= | j�|� dS )z�
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r' r r r �unregister_algorithm8 s
�zPyJWS.unregister_algorithmc C s
t | j�S )zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r r r �get_algorithmsF s
zPyJWS.get_algorithms�HS256�payloadr � algorithm�headers� json_encoder�returnc
C s g }|d u rd}|rd|v r|d r|d }| j |d�}|r/| �|� |�|� |d s/|d= tj|d|d��� }|�t|�� |�t|�� d�|�} z| j | }
|
�
|�}|
� | |�} W n t y| } zt
ss|tv rstd| �| �td �| �d } ~ ww |�t| �� d�|�}
|
�d
�S ) N�none�alg)�typr5 r6 )�,�:)�
separators�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?�Algorithm not supported�utf-8)�
header_typ�_validate_headers�update�json�dumps�encode�appendr �joinr � prepare_key�signr* r r �NotImplementedError�decode)r r/ r r0 r1 r2 �segments�header� json_header�
signing_inputr( � signature�e�encoded_stringr r r rC L sL
��
���
��
z PyJWS.encode� �jwtr r c K sf |d u ri }i | j �|�}|d }|r|std��| �|�\}} }
} |r-| �| |
| ||� ||
| d�S )Nr" z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r/ rK rN )r r
�_load�_verify_signature) r rR r r r �kwargs�merged_optionsr" r/ rM rK rN r r r �decode_complete� s ��zPyJWS.decode_completec K s | j ||||fi |��}|d S )Nr/ )rW )r rR r r r rU �decodedr r r rI � s z PyJWS.decodec C s | � |�d }| �|� |S )z�Returns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
� )rS r? )r rR r1 r r r �get_unverified_header� s
zPyJWS.get_unverified_headerc
C sj t |t�r
|�d�}t |t�stdt� ���z|�dd�\}}|�dd�\}}W n ty9 } ztd�|�d }~ww zt|�}W n t t
j fyT } ztd�|�d }~ww zt �
|�}W n tyo } ztd| �| �d } ~ ww t |t�sytd��zt|�}
W n t t
j fy� } ztd �|�d }~ww zt|�} W n t t
j fy� } ztd
�|�d }~ww |
||| fS ) Nr= z$Invalid token type. Token must be a r; r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r$ �strrC �bytesr
�rsplit�splitr# r r% �binascii�ErrorrA �loadsr ) r rR rM �crypto_segment�header_segment�payload_segment�err� header_datarK rO r/ rN r r r rS � sL
��
����
��
�� z PyJWS._loadc
C sv |� d�}|d ur||vrtd��z| j| }|�|�}|�|||�s'td��W d S ty: } ztd�|�d }~ww )Nr5 z&The specified alg value is not allowedz Signature verification failedr< )�getr r rF �verifyr r* ) r rM rK rN r r r5 r( rO r r r rT � s
�
��zPyJWS._verify_signaturec C s d|v r
| � |d � d S d S )N�kid)�
_validate_kid)r r1 r r r r? � s �zPyJWS._validate_headersc C s t |t�s td��d S )Nz(Key ID header parameter must be a string)r$ r[ r )r ri r r r rj � s
�zPyJWS._validate_kid)NN)r. NN)rQ NN)rQ N)�__name__�
__module__� __qualname__r> r! � staticmethodr r) r, r- r\ r[ r r r rA � JSONEncoderrC r r rW rI rZ rS rT r? rj r r r r r sv
����� �
�:�����
� �����
� +
� r ) r_ rA �collections.abcr �typingr r r r r r r r
r r �
exceptionsr
r r r �utilsr r r �_jws_global_objrC rW rI r) r, rZ r r r r �<module> s i