b'[ @ s_ d d l Z d d l Z d d l m Z d d l m Z m Z d d l m Z m Z y, d d l m
Z
m Z m Z m
Z
m Z Wn e k
r Yn Xd d l m Z d d l m Z m Z d d l m Z d d
l m Z m Z m Z m Z m Z m Z m Z d d l m Z Gd d
d
e Z! e! Z" e" j# Z# e" j$ Z$ e" j% Z% e" j& Z& e" j' Z' d S) N)timegm)IterableMapping)datetime timedelta)CallableDictListOptionalUnion )PyJWS) Algorithmget_default_algorithms) string_types) DecodeErrorExpiredSignatureErrorImmatureSignatureErrorInvalidAudienceErrorInvalidIssuedAtErrorInvalidIssuerErrorMissingRequiredClaimError)
merge_dictc s e Z d Z d Z e d d Z d d d f d d Z d d d d f d
d Z d d d d
d Z d d Z d d Z
d d Z d d Z d d Z
d d Z S)PyJWTZJWTc C s: d d d d d d d d d d d d d d d
d d d i S) Nverify_signatureT
verify_exp
verify_nbf
verify_iat
verify_aud
verify_iss require_expF require_iat require_nbf r# r# r# /api_jwt.py_get_default_options s zPyJWT._get_default_optionsZHS256Nc s t | t s t d xI d d d g D]8 } t | j | t r+ t | | j | | <q+ Wt j | d d
d | j d } t
t | j | | | | | S) NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.expiatnbfZ
separators,:clszutf-8)r) r* )
isinstancer TypeErrorgetr r utctimetuplejsondumpsencodesuperr )selfpayloadkey algorithmZheadersZ json_encoderZ
time_claimZ json_payload) __class__r# r$ r2 ) s z PyJWT.encode Tc s6 | r% | r% t j d d d t | j | \ } } } } | d k r[ d | i } n | j d | t t | j | d | d | d | | } y t j | j d } Wn5 t
k
r }
z t d |
WYd d }
~
Xn Xt | t
st d
| r2t | j | } | j | | | | S) Nz.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.r r6
algorithmsoptionszutf-8zInvalid payload string: %sz-Invalid payload string: must be a json object)warningswarnDeprecationWarning_load
setdefaultr3 r decoder0 loads
ValueErrorr r, r r r; _validate_claims) r4 Zjwtr6 Zverifyr: r; kwargsr5 _ZdecodedeZmerged_options)r8 r# r$ rA E s*
# z PyJWT.decoder c K sk d | k r2 | j d d | d <t j d t t | t rM | j } t | t t d t f sw t
d | j | | t t
j j } d | k r | j d r | j | | | d | k r | j d r | j | | | d
| k r)| j d r)| j | | | | j d rH| j | | | j d rg| j | | d S)
NZverify_expirationTr zXThe verify_expiration parameter is deprecated. Please use verify_exp in options instead.z,audience must be a string, iterable, or Noner' r r( r r& r r )r. r< r= r> r, r Z
total_secondsr typer r- _validate_required_claimsr r Zutcnowr/
_validate_iat
_validate_nbf
_validate_exp
_validate_iss
_validate_aud)r4 r5 r; audienceissuerleewayrE nowr# r# r$ rD m s( zPyJWT._validate_claimsc C s | j d r0 | j d d k r0 t d | j d r` | j d d k r` t d | j d r | j d d k r t d d S)Nr r& r! r' r" r( )r. r )r4 r5 r; r# r# r$ rI s $ $ $z PyJWT._validate_required_claimsc C s7 y t | d Wn t k
r2 t d Yn Xd S)Nr' z)Issued At claim (iat) must be an integer.)intrC r )r4 r5 rR rQ r# r# r$ rJ s
zPyJWT._validate_iatc C sU y t | d } Wn t k
r4 t d Yn X| | | k rQ t d d S)Nr( z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rS rC r r )r4 r5 rR rQ r( r# r# r$ rK s
zPyJWT._validate_nbfc C sU y t | d } Wn t k
r4 t d Yn X| | | k rQ t d d S)Nr& z/Expiration Time claim (exp) must be an integer.zSignature has expired)rS rC r r )r4 r5 rR rQ r& r# r# r$ rL s
zPyJWT._validate_expc s
| d k r d | k r d S| d k r@ d | k r@ t d | d k rd d | k rd t d | d t t r g t t s t d t d d D r t d t | t r | g } t f d d | D s t d d S)NaudzInvalid audiencez Invalid claim format in tokenc s s | ] } t | t Vq d S)N)r, r ).0cr# r# r$ <genexpr> s z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s | ] } | k Vq d S)Nr# )rU rT )audience_claimsr# r$ rW s )r r r, r listany)r4 r5 rO r# )rX r$ rN s"
zPyJWT._validate_audc C sH | d k r d Sd | k r( t d | d | k rD t d d S)NZisszInvalid issuer)r r )r4 r5 rP r# r# r$ rM s zPyJWT._validate_iss)__name__
__module__ __qualname__Z header_type staticmethodr% r2 rA rD rI rJ rK rL rN rM r# r# )r8 r$ r s" #!
r )(r0 r< Zcalendarr collectionsr r r r Ztypingr r r r
r ImportErrorZapi_jwsr
r: r r compatr
exceptionsr r r r r r r Zutilsr r Z_jwt_global_objr2 rA Zregister_algorithmZunregister_algorithmZget_unverified_headerr# r# r# r$ <module> s( ,
4