o Yh@sddlZddlZddlZddlmZzddlmZmZmZm Z m Z Wn e y+Ynwddl m Z mZmZmZddlmZmZmZddlmZmZmZmZddlmZmZmZmZGd d d eZ e Z!e!j"Z"e!j#Z#e!j$Z$e!j%Z%e!j&Z&dS) N)Mapping)CallableDictListOptionalUnion) Algorithmget_default_algorithms has_cryptorequires_cryptography) binary_type string_types text_type) DecodeErrorInvalidAlgorithmErrorInvalidSignatureErrorInvalidTokenError)base64url_decodebase64url_encode force_bytes merge_dictc@seZdZdZdddZeddZddZd d Zd d Z  dddZ    d ddZ ddZ ddZ d!ddZddZddZdS)"PyJWSJWTNcCsft|_|dur t|nt|j|_t|jD] }||jvr$|j|=q|s)i}t|||_dS)N) r _algorithmsset _valid_algslistkeysr_get_default_optionsoptions)self algorithmsr keyr$=/var/www/html/env/lib/python3.10/site-packages/jwt/api_jws.py__init__s zPyJWS.__init__cCsddiS)Nverify_signatureTr$r$r$r$r%r(szPyJWS._get_default_optionscCs>||jvr tdt|tstd||j|<|j|dS)zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r ValueError isinstancer TypeErrorradd)r!alg_idalg_objr$r$r%register_algorithm.s   zPyJWS.register_algorithmcCs*||jvr td|j|=|j|dS)z Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)rKeyErrorrremove)r!r,r$r$r%unregister_algorithm;s zPyJWS.unregister_algorithmcCs t|jS)zM Returns a list of supported values for the 'alg' parameter. )rr)r!r$r$r%get_algorithmsGs zPyJWS.get_algorithmsHS256c Csg}|durd}||jvr |j|d}|r ||||ttj|d|d}|t||t|d |} z|j |} | |}| | |} Wnt yftsb|tvrbtd|tdw|t| d |S)Nnone)typalg),:) separatorscls.zFAlgorithm '%s' could not be found. Do you have cryptography installed?Algorithm not supported)r header_typ_validate_headersupdaterjsondumpsappendrjoinr prepare_keysignr/r r NotImplementedError) r!payloadr# algorithmheaders json_encodersegmentsheader json_header signing_inputr- signaturer$r$r%encodeMsD          z PyJWS.encodeTc Ksnt|j|}|d}|r|stdt||\} } } } |s)tjdtdd| S|r5|| | | | ||| S)Nr'zIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.zSThe verify parameter is deprecated. Please use verify_signature in options instead.) stacklevel)rr warningswarnDeprecationWarning_load_verify_signature) r!jwtr#verifyr"r kwargsmerged_optionsr'rGrNrLrOr$r$r%decodes$  z PyJWS.decodecCs||d}|||S)zReturns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete rR)rWr>)r!rYrIr$r$r%get_unverified_headers zPyJWS.get_unverified_headerc CsBt|tr |d}tt|tstdtz|dd\}}| dd\}}Wn t y5tdwzt |}Wnt t jfyJtdwz t|d}Wnt yg}ztd|d}~wwt|tsqtdzt |} Wnt t jfytd wzt |} Wnt t jfytd w| ||| fS) Nzutf-8z'Invalid token type. Token must be a {0}r;rzNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r)rrP issubclasstyper rformatrsplitsplitr(rr*binasciiErrorr@loadsr]r) r!rYrNcrypto_segmentheader_segmentpayload_segment header_datarLerGrOr$r$r%rWsH         z PyJWS._loadc Csj|d}|dur||vrtdz|j|}||}||||s'tdWdSty4tdw)Nr6z&The specified alg value is not allowedzSignature verification failedr<)getrrrDrZrr/) r!rGrNrLrOr#r"r6r-r$r$r%rXs    zPyJWS._verify_signaturecCsd|vr ||ddSdS)Nkid) _validate_kid)r!rIr$r$r%r>szPyJWS._validate_headerscCst|ts tddS)Nz(Key ID header parameter must be a string)r)rr)r!rmr$r$r%rns zPyJWS._validate_kid)NN)r3NN)rQTNN)rQN)__name__ __module__ __qualname__r=r& staticmethodrr.r1r2rPr]r^rWrXr>rnr$r$r$r%rs.      7  (  r)'rdr@rT collectionsrtypingrrrrr ImportErrorr"r r r r compatr rr exceptionsrrrrutilsrrrrobjectr_jws_global_objrPr]r.r1r^r$r$r$r%s*   Y