b'[ @ sG d d l Z d d l Z d d l Z d d l m Z y, d d l m Z m Z m Z m Z m
Z
Wn e k
rt Yn Xd d l m
Z
m Z m Z m Z d d l m Z m Z m Z d d l m Z m Z m Z m Z d d l m Z m Z m Z m Z Gd d
d
e Z e Z! e! j" Z" e! j# Z# e! j$ Z$ e! j% Z% e! j& Z& d S) N)Mapping)CallableDictListOptionalUnion ) Algorithmget_default_algorithms
has_cryptorequires_cryptography) binary_type string_types text_type) DecodeErrorInvalidAlgorithmErrorInvalidSignatureErrorInvalidTokenError)base64url_decodebase64url_encode force_bytes
merge_dictc @ s e Z d Z d Z d d d d Z e d d Z d d Z d d
Z d d Z d
d d d d Z
d d d d d d Z d d Z d d Z
d d d d Z d d Z d d Z d S) PyJWSZJWTNc C s t | _ | d k r$ t | n t | j | _ x6 t | j j D] } | | j k rL | j | =qL W| s{ i } t | j | | _ d S)N) r
_algorithmsset _valid_algslistkeysr _get_default_optionsoptions)self
algorithmsr key r# /api_jws.py__init__ s zPyJWS.__init__c C s
d d i S)Nverify_signatureTr# r# r# r# r$ r ( s zPyJWS._get_default_optionsc C sW | | j k r t d t | t s6 t d | | j | <| j j | d S)zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r
ValueError
isinstancer TypeErrorr add)r alg_idalg_objr# r# r$ register_algorithm. s
zPyJWS.register_algorithmc C s9 | | j k r t d | j | =| j j | d S)z
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r KeyErrorr remove)r r+ r# r# r$ unregister_algorithm; s
zPyJWS.unregister_algorithmc C s
t | j S)zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r# r# r$ get_algorithmsG s zPyJWS.get_algorithmsZHS256c C sK g } | d k r d } | | j k r' d | j d | i } | r\ | j | | j | t t j | d d d | } | j t | | j t | d j | } y2 | j
| }
|
j | } |
j | | } WnD t
k
r*t r| t k rt d | n t d
Yn X| j t | d j | S) NZnonetypalgZ
separators,:cls .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supported)r4 r5 )r
header_typ_validate_headersupdater jsondumpsappendr joinr prepare_keyZsignr. r r NotImplementedError) r payloadr" algorithmheadersZ json_encoderZsegmentsheaderZ json_header
signing_inputr, signaturer# r# r$ encodeM s8
z PyJWS.encode Tc
K s t | j | } | d } | rA | rA t j d d d t | j | \ } }
} } | s{ t j d t d d n" | r | j | |
| | | | | S)Nr& z.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.zSThe verify parameter is deprecated. Please use verify_signature in options instead.
stacklevel )r r warningswarnDeprecationWarning_load_verify_signature)
r jwtr" verifyr! r kwargsZmerged_optionsr& rA rE rD rF r# r# r$ decode s
z PyJWS.decodec C s$ | j | d } | j | | S)zReturns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
rJ )rN r9 )r rP rC r# r# r$ get_unverified_header s
zPyJWS.get_unverified_headerc 2 C s t | t r | j d } t t | t sH t d j t y4 | j d d \ } } | j d d \ } } Wn t
k
r t d Yn Xy t | } Wn' t t
j f k
r t d Yn Xy t j | j d } Wn5 t
k
r*} z t d | WYd d } ~ Xn Xt | t sFt d y t | } Wn' t t
j f k
rt d Yn Xy t | }
Wn' t t
j f k
rt d
Yn X| | | |
f S) Nzutf-8z'Invalid token type. Token must be a {0}r7 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r( r rG
issubclasstyper
r formatrsplitsplitr' r r) binasciiErrorr; loadsrS r ) r rP rE Zcrypto_segmentZheader_segmentZpayload_segmentZ header_datarD erA rF r# r# r$ rN s:
# z PyJWS._loadc C s | j d } | d k r3 | | k r3 t d yA | j | } | j | } | j | | | ss t d Wn t k
r t d Yn Xd S)Nr3 z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)getr r r? rQ r r. ) r rA rE rD rF r" r! r3 r, r# r# r$ rO s
zPyJWS._verify_signaturec C s! d | k r | j | d d S)Nkid)
_validate_kid)r rC r# r# r$ r9 s zPyJWS._validate_headersc C s t | t s t d d S)Nz(Key ID header parameter must be a string)r( r r )r r_ r# r# r$ r` s zPyJWS._validate_kid)__name__
__module__ __qualname__r8 r% staticmethodr r- r0 r1 rG rS rT rN rO r9 r` r# r# r# r$ r s$
2 ( r )'rZ r; rK collectionsr Ztypingr r r r r ImportErrorr! r r
r r compatr
r r
exceptionsr r r r Zutilsr r r r objectr Z_jws_global_objrG rS r- r0 rT r# r# r# r$ <module> s$ ,
" ""