U
_ @ s d dl Z d dlZd dlmZ d dlmZmZmZmZm Z ddl
m Z m Z m
Z
mZ ddlmZmZmZmZ ddlmZmZ G dd d Ze ZejZejZejZej Z ej Z ej Z dS )
N)Mapping)AnyDictListOptionalType ) Algorithmget_default_algorithms
has_cryptorequires_cryptography) DecodeErrorInvalidAlgorithmErrorInvalidSignatureErrorInvalidTokenError)base64url_decodebase64url_encodec @ s e Zd ZdZd!ddZedd Zdd Zd d
Zd d Z d"e
e e e e
e eej e dddZd#e e ee e
e
e ef dddZd$e e ee e
e dddZdd Zdd Zd%dd Zd d Zd d ZdS )&PyJWSZJWTNc C sh t | _|d k rt|nt| j| _t| j D ]}|| jkr2| j|= q2|d krVi }| || _d S )N)r
_algorithmsset _valid_algslistkeys_get_default_optionsoptions)self
algorithmsr key r </opt/alt/python38/lib/python3.8/site-packages/jwt/api_jws.py__init__ s
zPyJWS.__init__c C s ddiS )Nverify_signatureTr r r r r r ' s zPyJWS._get_default_optionsc C s> || j krtdt|ts$td|| j |< | j| dS )zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r
ValueError
isinstancer TypeErrorr add)r alg_idalg_objr r r register_algorithm+ s
zPyJWS.register_algorithmc C s* || j krtd| j |= | j| dS )z
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r KeyErrorr remove)r r& r r r unregister_algorithm8 s
zPyJWS.unregister_algorithmc C s
t | jS )zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r r r get_algorithmsF s zPyJWS.get_algorithmsHS256)payloadr algorithmheaders json_encoderreturnc
C s g }|d krd}|| j kr| j|d}|r>| | || tj|d|d }|t| |t| d |} z$| j
| }
|
|}|
| |} W n6 t
k
r ts|tkrtd| ntdY nX |t| d |} | dS ) NZnone)typalg),:)Z
separatorscls .zFAlgorithm '%s' could not be found. Do you have cryptography installed?Algorithm not supportedutf-8)r
header_typ_validate_headersupdatejsondumpsencodeappendr joinr prepare_keyZsignr) r r NotImplementedErrordecode)
r r. r r/ r0 r1 ZsegmentsheaderZ json_header
signing_inputr' signatureZencoded_stringr r r r@ L s>
z PyJWS.encode )jwtr r r r2 c K sb |d kr i }| j |}|d }|r.|s.td| |\}} }
} |rV| | |
| || ||
| dS )Nr! z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r. rF rH )r r
_load_verify_signature) r rJ r r r kwargsZmerged_optionsr! r. rG rF rH r r r decode_complete s
zPyJWS.decode_completec K s | j ||||f|}|d S )Nr. )rN )r rJ r r r rM Zdecodedr r r rE s z PyJWS.decodec C s | |d }| | |S )zReturns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
)rK r< )r rJ r0 r r r get_unverified_header s
zPyJWS.get_unverified_headerc
C s t |tr|d}t |ts,tdt z$|dd\}}|dd\}}W n, tk
r| } ztd|W 5 d }~X Y nX z t|}W n2 t t
j fk
r } ztd|W 5 d }~X Y nX zt
|}W n0 tk
r } ztd| | W 5 d } ~ X Y nX t |tstdz t|}
W n4 t t
j fk
rR } ztd |W 5 d }~X Y nX z t|} W n4 t t
j fk
r } ztd
|W 5 d }~X Y nX |
||| fS ) Nr: z$Invalid token type. Token must be a r8 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r# strr@ bytesr
rsplitsplitr" r r$ binasciiErrorr> loadsr ) r rJ rG Zcrypto_segmentZheader_segmentZpayload_segmenterrZ header_datarF er. rH r r r rK s8
z PyJWS._loadc C sr | d}|d k r"||kr"tdz.| j| }||}||||sNtdW n tk
rl tdY nX d S )Nr4 z&The specified alg value is not allowedz Signature verification failedr9 )getr r rC Zverifyr r) )r rG rF rH r r r4 r' r r r rL s
zPyJWS._verify_signaturec C s d|kr| |d d S )Nkid)
_validate_kid)r r0 r r r r< s zPyJWS._validate_headersc C s t |tstdd S )Nz(Key ID header parameter must be a string)r# rQ r )r r[ r r r r\ s
zPyJWS._validate_kid)NN)r- NN)rI NN)rI NN)rI N)__name__
__module__ __qualname__r; r staticmethodr r( r+ r, rR rQ r r r r> Z JSONEncoderr@ r r rN rE rP rK rL r< r\ r r r r r sZ
7
+
r ) rU r> Zcollections.abcr typingr r r r r r r r
r r
exceptionsr
r r r Zutilsr r r Z_jws_global_objr@ rN rE r( r+ rP r r r r <module> s f