Your IP : 3.145.61.142
B
���_� � @ s� d dl Z d dlZd dlmZ d dlmZmZmZmZm Z ddl
m Z m Z m
Z
mZ ddlmZmZmZmZ ddlmZmZ G dd � d �Ze� ZejZejZejZej Z ej Z ej Z dS )
� N)�Mapping)�Any�Dict�List�Optional�Type� )� Algorithm�get_default_algorithms�
has_crypto�requires_cryptography)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encodec @ s� e Zd ZdZd!dd�Zedd� �Zdd� Zd d
� Zd d � Z d"e
e e e e
e eej e d�dd�Zd#e e ee e
e
e ef d�dd�Zd$e e ee e
e d�dd�Zdd� Zdd� Zd%dd �Zd d � Zd d � ZdS )&�PyJWSZJWTNc C sl t � | _|d k rt|�nt| j�| _x(t| j�� �D ]}|| jkr4| j|= q4W |d krZi }| �� |�| _d S )N)r
� _algorithms�set� _valid_algs�list�keys�_get_default_options�options)�self�
algorithmsr �key� r �</opt/alt/python37/lib/python3.7/site-packages/jwt/api_jws.py�__init__ s
zPyJWS.__init__c C s ddiS )N�verify_signatureTr r r r r r ' s zPyJWS._get_default_optionsc C s> || j krtd��t|t�s$td��|| j |< | j�|� dS )zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r �
ValueError�
isinstancer � TypeErrorr �add)r �alg_id�alg_objr r r �register_algorithm+ s
zPyJWS.register_algorithmc C s* || j krtd��| j |= | j�|� dS )z�
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r& r r r �unregister_algorithm8 s
zPyJWS.unregister_algorithmc C s
t | j�S )zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r r r �get_algorithmsF s zPyJWS.get_algorithms�HS256)�payloadr � algorithm�headers� json_encoder�returnc
C s� g }|d krd}|| j kr| j|d�}|r>| �|� |�|� tj|d|d��� }|�t|�� |�t|�� d� |�} y$| j
| }
|
� |�}|
� | |�} W n6 t
k
r� ts�|tkr�td| ��ntd��Y nX |�t| �� d� |�} | �d�S ) NZnone)�typ�alg)�,�:)�
separators�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supportedzutf-8)r �
header_typ�_validate_headers�update�json�dumps�encode�appendr �joinr � prepare_key�signr) r r �NotImplementedError�decode)
r r. r r/ r0 r1 �segments�headerZ json_header�
signing_inputr' � signature�encoded_stringr r r r? L s4
z PyJWS.encode� )�jwtr r r r2 c K sb |d kr i }| j |�}|d }|r.|s.td��| �|�\}} }
} |rV| �| |
| ||� ||
| d�S )Nr! z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r. rG rI )r r
�_load�_verify_signature) r rL r r r �kwargsZmerged_optionsr! r. rH rG rI r r r �decode_complete� s
zPyJWS.decode_completec K s | j ||||f|�}|d S )Nr. )rP )r rL r r r rO �decodedr r r rE � s z PyJWS.decodec C s | � |�d }| �|� |S )z�Returns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
� )rM r; )r rL r0 r r r �get_unverified_header� s
zPyJWS.get_unverified_headerc
C s� t |t�r|�d�}t |t�s,tdt� ���y$|�dd�\}}|�dd�\}}W n, tk
r| } ztd�|�W d d }~X Y nX y t|�}W n2 t t
j fk
r� } ztd�|�W d d }~X Y nX yt �
|�}W n0 tk
r� } ztd| �| �W d d } ~ X Y nX t |t��std��y t|�}
W n4 t t
j fk
�rR } ztd �|�W d d }~X Y nX y t|�} W n4 t t
j fk
�r� } ztd
�|�W d d }~X Y nX |
||| fS ) Nzutf-8z$Invalid token type. Token must be a r9 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r# �strr? �bytesr
�rsplit�splitr" r r$ �binascii�Errorr= �loadsr ) r rL rH Zcrypto_segmentZheader_segmentZpayload_segment�errZ header_datarG �er. rI r r r rM � s8
z PyJWS._loadc C sr |� d�}|d k r"||kr"td��y.| j| }|�|�}|�|||�sNtd��W n tk
rl td��Y nX d S )Nr4 z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)�getr r rB Zverifyr r) )r rH rG rI r r r4 r' r r r rN � s
zPyJWS._verify_signaturec C s d|kr| � |d � d S )N�kid)�
_validate_kid)r r0 r r r r; � s zPyJWS._validate_headersc C s t |t�std��d S )Nz(Key ID header parameter must be a string)r# rT r )r r^ r r r r_ � s
zPyJWS._validate_kid)NN)r- NN)rK NN)rK NN)rK N)�__name__�
__module__� __qualname__r: r � staticmethodr r( r+ r, rU rT r r r r= � JSONEncoderr? r r rP rE rS rM rN r; r_ r r r r r s0
0 +
r ) rX r= �collections.abcr �typingr r r r r r r r
r r �
exceptionsr
r r r �utilsr r r Z_jws_global_objr? rP rE r( r+ rS r r r r �<module> s f