3 de#@sddlZddlZddlmZddlmZmZmZmZm Z ddl m Z m Z m Z mZddlmZmZmZmZddlmZmZGdd d ZeZejZejZejZejZejZejZdS) N)Mapping)AnyDictListOptionalType) Algorithmget_default_algorithms has_cryptorequires_cryptography) DecodeErrorInvalidAlgorithmErrorInvalidSignatureErrorInvalidTokenError)base64url_decodebase64url_encodec @seZdZdZd#ddZeddZddZd d Zd d Z d$e e e e e e e eejee dddZd%e e e ee e e e e e e efdddZd&e e e ee e e e dddZddZddZd'ddZdd Zd!d"ZdS)(PyJWSZJWTNcCslt|_|dk rt|nt|j|_x(t|jjD]}||jkr4|j|=q4W|dkrZi}|j||_dS)N)r _algorithmsset _valid_algslistkeys_get_default_optionsoptions)self algorithmsrkeyrB/var/www/agendate/envp3/lib/python3.6/site-packages/jwt/api_jws.py__init__s  zPyJWS.__init__cCsddiS)Nverify_signatureTrrrrrr'szPyJWS._get_default_optionscCs>||jkrtdt|ts$td||j|<|jj|dS)zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r ValueError isinstancer TypeErrorradd)ralg_idalg_objrrrregister_algorithm+s    zPyJWS.register_algorithmcCs*||jkrtd|j|=|jj|dS)z Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)rKeyErrorrremove)rr&rrrunregister_algorithm8s  zPyJWS.unregister_algorithmcCs t|jS)zM Returns a list of supported values for the 'alg' parameter. )rr)rrrrget_algorithmsFszPyJWS.get_algorithmsHS256F)payloadr algorithmheaders json_encoderis_payload_detachedreturncCs~g}|dkrd}|r@|jd}|r*|d}|jd} | dkr@d}|j|d} |rd|j|| j|| dsr| d=|rd| d<nd| kr| d=tj| d|d j} |jt| |r|} nt|} |j| d j |} y$|j |}|j |}|j | |}WnRt k rL}z4t r2|tkr2td |d |td|WYdd}~XnX|jt||rjd|d<d j |}|jdS)Nnonealgb64FT)typr5r7,:) separatorscls.z Algorithm 'z9' could not be found. Do you have cryptography installed?zAlgorithm not supportedrzutf-8)r8r9)get header_typ_validate_headersupdatejsondumpsencodeappendrjoinr prepare_keysignr)r r NotImplementedErrordecode)rr.rr/r0r1r2segmentsZ headers_algZ headers_b64headerZ json_headerZ msg_payload signing_inputr' signatureeencoded_stringrrrrDLsV             z PyJWS.encode)jwtrrrdetached_payloadr3c Ks|dkr i}|j|}|d}|r0| r0td|j|\} } } } | jdddkr|dkrbtd|} dj| jddd | g} |r|j| | | ||| | | d S) Nr!z\It is required that you pass in a value for the "algorithms" argument when calling decode().r6TFzIt is required that you pass in a value for the "detached_payload" argument to decode a message having the b64 header set to false.r<rr)r.rLrN)rr _loadr>rFrsplit_verify_signature) rrRrrrrSkwargsZmerged_optionsr!r.rMrLrNrrrdecode_completes&   zPyJWS.decode_complete)rRrrrr3cKs|j||||f|}|dS)Nr.)rX)rrRrrrrWdecodedrrrrJsz PyJWS.decodecCs|j|d}|j||S)zReturns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete )rTr@)rrRr0rrrget_unverified_headers zPyJWS.get_unverified_headerc JCst|tr|jd}t|ts,tdty$|jdd\}}|jdd\}}Wn,tk r|}ztd|WYdd}~XnXy t|}Wn2t t j fk r}ztd|WYdd}~XnXyt j |}Wn4tk r} ztd| | WYdd} ~ XnXt|tstdy t|} Wn4t t j fk rV}ztd |WYdd}~XnXy t|} Wn4t t j fk r}ztd |WYdd}~XnX| ||| fS) Nzutf-8z$Invalid token type. Token must be a r<rzNot enough segmentszInvalid header paddingzInvalid header string: z,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r#strrDbytesr rUsplitr"rr$binasciiErrorrBloadsr) rrRrMZcrypto_segmentZheader_segmentZpayload_segmenterrZ header_datarLrOr.rNrrrrTs8    "   z PyJWS._loadc Cs|jd}|dk r"||kr"tdy.|j|}|j|}|j|||sNtdWn,tk r|}ztd|WYdd}~XnXdS)Nr5z&The specified alg value is not allowedzSignature verification failedzAlgorithm not supported)r>rrrGverifyrr)) rrMrLrNrrr5r'rOrrrrVs    zPyJWS._verify_signaturecCsd|kr|j|ddS)Nkid) _validate_kid)rr0rrrr@szPyJWS._validate_headerscCst|tstddS)Nz(Key ID header parameter must be a string)r#r\r)rrdrrrres zPyJWS._validate_kid)NN)r-NNF)rQNNN)rQNN)rQN)__name__ __module__ __qualname__r?r staticmethodrr(r+r,r]r\rrrrB JSONEncoderboolrDrrrXrJr[rTrVr@rerrrrrs4     G! + r)r_rBcollections.abcrtypingrrrrrrr r r r exceptionsr rrrutilsrrrZ_jws_global_objrDrXrJr(r+r[rrrrs