b'[� � @ sG d d l Z d d l Z d d l Z d d l m Z y, d d l m Z m Z m Z m Z m
Z
Wn e k
rt Yn Xd d l m
Z
m Z m Z m Z d d l m Z m Z m Z d d l m Z m Z m Z m Z d d l m Z m Z m Z m Z Gd d
� d
e � Z e � Z! e! j" Z" e! j# Z# e! j$ Z$ e! j% Z% e! j& Z& d S) � N)�Mapping)�Callable�Dict�List�Optional�Union� )� Algorithm�get_default_algorithms�
has_crypto�requires_cryptography)� binary_type� string_types� text_type)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encode� force_bytes�
merge_dictc @ s� e Z d Z d Z d d d d � Z e d d � � Z d d � Z d d
� Z d d � Z d
d d d d � Z
d d d d d d � Z d d � Z d d � Z
d d d d � Z d d � Z d d � Z d S) �PyJWSZJWTNc C s� t � | _ | d k r$ t | � n t | j � | _ x6 t | j j � � D] } | | j k rL | j | =qL W| s{ i } t | j � | � | _ d S)N) r
� _algorithms�set� _valid_algs�list�keysr �_get_default_options�options)�self�
algorithmsr �key� r# � /api_jws.py�__init__ s zPyJWS.__init__c C s
d d i S)N�verify_signatureTr# r# r# r# r$ r ( s zPyJWS._get_default_optionsc C sW | | j k r t d � � t | t � s6 t d � � | | j | <| j j | � d S)zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r �
ValueError�
isinstancer � TypeErrorr �add)r �alg_id�alg_objr# r# r$ �register_algorithm. s
zPyJWS.register_algorithmc C s9 | | j k r t d � � | j | =| j j | � d S)z�
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r+ r# r# r$ �unregister_algorithm; s
zPyJWS.unregister_algorithmc C s
t | j � S)zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r# r# r$ �get_algorithmsG s zPyJWS.get_algorithmsZHS256c C sK g } | d k r d } | | j k r' d | j d | i } | r\ | j | � | j | � t t j | d d d | �� } | j t | � � | j t | � � d j | � } y2 | j
| }
|
j | � } |
j | | � } WnD t
k
r*t r| t k rt d | � � n t d
� � Yn X| j t | � � d j | � S) NZnone�typ�algZ
separators�,�:�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supported)r4 r5 )r �
header_typ�_validate_headers�updater �json�dumps�appendr �joinr � prepare_keyZsignr. r r �NotImplementedError) r �payloadr" � algorithm�headersZ json_encoderZsegments�headerZ json_header�
signing_inputr, � signaturer# r# r$ �encodeM s8
z PyJWS.encode� Tc
K s� t | j | � } | d } | rA | rA t j d d d t � | j | � \ } }
} } | s{ t j d t d d �n" | r� | j | |
| | | | � | S)Nr& z.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.zSThe verify parameter is deprecated. Please use verify_signature in options instead.�
stacklevel� )r r �warnings�warn�DeprecationWarning�_load�_verify_signature)
r �jwtr" �verifyr! r �kwargsZmerged_optionsr& rA rE rD rF r# r# r$ �decode� s
z PyJWS.decodec C s$ | j | � d } | j | � | S)z�Returns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
rJ )rN r9 )r rP rC r# r# r$ �get_unverified_header� s
zPyJWS.get_unverified_headerc 2 C s� t | t � r | j d � } t t | � t � sH t d j t � � � y4 | j d d � \ } } | j d d � \ } } Wn t
k
r� t d � � Yn Xy t | � } Wn' t t
j f k
r� t d � � Yn Xy t j | j d � � } Wn5 t
k
r*} z t d | � � WYd d } ~ Xn Xt | t � sFt d � � y t | � } Wn' t t
j f k
rt d � � Yn Xy t | � }
Wn' t t
j f k
r�t d
� � Yn X| | | |
f S) Nzutf-8z'Invalid token type. Token must be a {0}r7 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r( r rG �
issubclass�typer
r �format�rsplit�splitr' r r) �binascii�Errorr; �loadsrS r ) r rP rE Zcrypto_segmentZheader_segmentZpayload_segmentZ header_datarD �erA rF r# r# r$ rN � s:
# z PyJWS._loadc C s� | j d � } | d k r3 | | k r3 t d � � yA | j | } | j | � } | j | | | � ss t d � � Wn t k
r� t d � � Yn Xd S)Nr3 z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)�getr r r? rQ r r. ) r rA rE rD rF r" r! r3 r, r# r# r$ rO � s
zPyJWS._verify_signaturec C s! d | k r | j | d � d S)N�kid)�
_validate_kid)r rC r# r# r$ r9 � s zPyJWS._validate_headersc C s t | t � s t d � � d S)Nz(Key ID header parameter must be a string)r( r r )r r_ r# r# r$ r` � s zPyJWS._validate_kid)�__name__�
__module__� __qualname__r8 r% � staticmethodr r- r0 r1 rG rS rT rN rO r9 r` r# r# r# r$ r s$
2 ( r )'rZ r; rK � collectionsr Ztypingr r r r r � ImportErrorr! r r
r r �compatr
r r �
exceptionsr r r r Zutilsr r r r �objectr Z_jws_global_objrG rS r- r0 rT r# r# r# r$ �<module> s$ ,
" ""� | Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| __init__.cpython-35.opt-1.pyc | File | 1.08 KB | 0644 |
|
| __init__.cpython-35.pyc | File | 1.08 KB | 0644 |
|
| __main__.cpython-35.opt-1.pyc | File | 3.74 KB | 0644 |
|
| __main__.cpython-35.pyc | File | 3.74 KB | 0644 |
|
| algorithms.cpython-35.opt-1.pyc | File | 11.83 KB | 0644 |
|
| algorithms.cpython-35.pyc | File | 11.83 KB | 0644 |
|
| api_jws.cpython-35.opt-1.pyc | File | 6.63 KB | 0644 |
|
| api_jws.cpython-35.pyc | File | 6.63 KB | 0644 |
|
| api_jwt.cpython-35.opt-1.pyc | File | 6.27 KB | 0644 |
|
| api_jwt.cpython-35.pyc | File | 6.27 KB | 0644 |
|
| compat.cpython-35.opt-1.pyc | File | 1.48 KB | 0644 |
|
| compat.cpython-35.pyc | File | 1.48 KB | 0644 |
|
| exceptions.cpython-35.opt-1.pyc | File | 2.36 KB | 0644 |
|
| exceptions.cpython-35.pyc | File | 2.36 KB | 0644 |
|
| help.cpython-35.opt-1.pyc | File | 1.45 KB | 0644 |
|
| help.cpython-35.pyc | File | 1.45 KB | 0644 |
|
| utils.cpython-35.opt-1.pyc | File | 3.3 KB | 0644 |
|
| utils.cpython-35.pyc | File | 3.3 KB | 0644 |
|