U
E` @ s d dl Z d dlmZ d dlmZmZ d dlmZmZ d dlm Z m
Z
m Z m Z m
Z
mZ ddlmZ ddlmZmZmZmZmZmZmZ G d d
d
Ze ZejZej Z ej Z dS ) N)timegm)IterableMapping)datetime timedelta)AnyDictListOptionalTypeUnion )api_jws) DecodeErrorExpiredSignatureErrorImmatureSignatureErrorInvalidAudienceErrorInvalidIssuedAtErrorInvalidIssuerErrorMissingRequiredClaimErrorc @ s e Zd Zd ddZeeeeee e f f dddZ
d!eee f eee e e e
ej edd d
Zd"eee e eeee f d d
dZd#eee e eeee f d ddZd$ddZdd Zdd Zdd Zdd Zd d Zd d ZdS )%PyJWTNc C s |d kr i }| || _d S N)_get_default_optionsoptions)selfr r </opt/alt/python38/lib/python3.8/site-packages/jwt/api_jwt.py__init__ s zPyJWT.__init__)returnc C s ddddddg dS )NT)verify_signature
verify_exp
verify_nbf
verify_iat
verify_aud
verify_issrequirer r r r r r s zPyJWT._get_default_optionsHS256)payloadkey algorithmheaders json_encoderr c C sp t |tstd| }dD ](}t ||tr t|| ||< q tj |d|d
d}t
|||||S )NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.)expiatnbf),:)Z
separatorsclszutf-8)
isinstancer TypeErrorcopygetr r utctimetuplejsondumpsencoder )r r' r( r) r* r+ Z
time_claimZ json_payloadr r r r9 % s
z PyJWT.encode )jwtr(
algorithmsr r c
K s
|d krddi}n | dd |d sb| dd | dd | dd | dd | dd |d rv|svtd tj|f|||d
|}zt|d }W n. tk
r } ztd | W 5 d }~X Y nX t|tstd
| j |} | j
|| f| ||d < |S )Nr Tr Fr! r" r# r$ z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r( r< r r' zInvalid payload string: %sz-Invalid payload string: must be a json object)
setdefaultr r decode_completer7 loads
ValueErrorr2 dictr _validate_claims)
r r; r( r< r kwargsdecodedr' eZmerged_optionsr r r r> A s@
zPyJWT.decode_completec K s | j ||||f|}|d S )Nr' )r> )r r; r( r< r rC rD r r r decodeo s z PyJWT.decoder c K s t |tr| }t |tttd tfs0td| || t t
}d|krj|d rj|
||| d|kr|d r| ||| d|kr|d r| ||| |d r| || |d r| || d S )
Nz,audience must be a string, iterable, or Noner- r" r. r! r, r r$ r# )r2 r Z
total_secondsbytesstrtyper r3 _validate_required_claimsr r Zutcnowr6
_validate_iat
_validate_nbf
_validate_exp
_validate_iss
_validate_aud)r r' r audienceissuerleewayrC nowr r r rB z s
zPyJWT._validate_claimsc C s( |d D ]}| |d krt|qd S )Nr% )r5 r )r r' r Zclaimr r r rJ s z PyJWT._validate_required_claimsc C s2 zt |d W n tk
r, tdY nX d S )Nr- z)Issued At claim (iat) must be an integer.)intr@ r )r r' rS rR r r r rK s zPyJWT._validate_iatc C sF zt |d }W n tk
r, tdY nX ||| krBtdd S )Nr. z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rT r@ r r )r r' rS rR r. r r r rL s zPyJWT._validate_nbfc C sF zt |d }W n tk
r, tdY nX ||| k rBtdd S )Nr, z/Expiration Time claim (exp) must be an integer.zSignature has expired)rT r@ r r )r r' rS rR r, r r r rM s zPyJWT._validate_expc s |d krd|krd S |d k r,d|kr,t d|d krDd|krDtd|d t tr\ g t tsntdtdd D rtdt|tr|g}t fdd|D stdd S )NaudzInvalid audiencez Invalid claim format in tokenc s s | ]}t |t V qd S r )r2 rH ).0cr r r <genexpr> s z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s | ]}| kV qd S r r )rV rU Zaudience_claimsr r rX s )r r r2 rH listany)r r' rP r rY r rO s"
zPyJWT._validate_audc C s4 |d kr d S d|kr t d|d |kr0tdd S )NZisszInvalid issuer)r r )r r' rQ r r r rN s zPyJWT._validate_iss)N)r& NN)r: NN)r: NN)NNr )__name__
__module__ __qualname__r staticmethodr rH r boolr r r r
r r7 Z JSONEncoderr9 r> rF rB rJ rK rL rM rO rN r r r r r sX
$
1
r ) r7 Zcalendarr Zcollections.abcr r r r typingr r r r
r r r: r
exceptionsr r r r r r r r Z_jwt_global_objr9 r> rF r r r r <module> s $ I