3 de@s~ddlZddlZddlZddlZddlZejeZddZGddde Z Gddde Z Gdd d e Z e Z e Ze je_dS) Nc Csy |jddS|SdS)Nzutf-8)encoding)encode)rawrO/var/www/agendate/envp3/lib/python3.6/site-packages/msal/oauth2cli/assertion.py _str2bytes s rc@s eZdZdddZdddZdS) AssertionCreatorNXc Ks tddS)a+Create an assertion in bytes, based on the provided claims. All parameter names are defined in https://tools.ietf.org/html/rfc7521#section-5 except the expires_in is defined here as lifetime-in-seconds, which will be automatically translated into expires_at in UTC. z Will be implemented by sub-classN)NotImplementedError) selfaudienceissuersubject expires_at expires_in issued_at assertion_idkwargsrrrcreate_normal_assertions z(AssertionCreator.create_normal_assertionc s*t|||||ffdd t|dddS)zCreate an assertion as a callable, which will then compute the assertion later when necessary. This is a useful optimization to reuse the client assertion. csj|||fd|i|S)Nr)r)aiser)r rr'sz@AssertionCreator.create_regenerative_assertion..<r)r) AutoRefreshermax)r r r rrrr)r rcreate_regenerative_assertionsz.AssertionCreator.create_regenerative_assertion)Nr NN)Nr )__name__ __module__ __qualname__rrrrrrrs rc@s"eZdZdZdddZddZdS) raCache the output of a factory, and auto-refresh it when necessary. Usage:: r = AutoRefresher(time.time, expires_in=5) for i in range(15): print(r()) # the timestamp change only after every 5 seconds time.sleep(1) cCs||_||_i|_dS)N)_factory _expires_in_buf)r factoryrrrr__init__4szAutoRefresher.__init__cCs\d\}}tj}|jj|d|krFtjd||j|||ji|_n tjd|jj|S)NrvaluerzRegenerating new assertionzReusing still valid assertion)rr')timer$getloggerdebugr"r#)r Z EXPIRES_ATZVALUEnowrrr__call__8s  zAutoRefresher.__call__N)r!)rrr __doc__r&r-rrrrr,s rc@s eZdZdddZdddZdS) JwtAssertionCreatorNcCs8||_||_|pi|_|r4tjtj|j|jd<dS)aConstruct a Jwt assertion creator. Args: key (str): An unencrypted private key for signing, in a base64 encoded string. It can also be a cryptography ``PrivateKey`` object, which is how you can work with a previously-encrypted key. See also https://github.com/jpadilla/pyjwt/pull/525 algorithm (str): "RS256", etc.. See https://pyjwt.readthedocs.io/en/latest/algorithms.html RSA and ECDSA algorithms require "pip install cryptography". sha1_thumbprint (str): The x5t aka X.509 certificate SHA-1 thumbprint. headers (dict): Additional headers, e.g. "kid" or "x5c" etc. Zx5tN)key algorithmheadersbase64urlsafe_b64encodebinasciia2b_hexdecode)r r0r1Zsha1_thumbprintr2rrrr&Ds  zJwtAssertionCreator.__init__Xc  Ksddl} tj} |||p||p$| ||p*| |p8ttjd} |rJ|| d<| j| pTiy | j| |j|j|j d}t |S|jj ds|jj drt j dYnXdS) zCreate a JWT Assertion. Parameters are defined in https://tools.ietf.org/html/rfc7523#section-3 Key-value pairs in additional_claims will be added into payload as-is. rN)ZaudZisssubexpZiatZjtiZnbf)r1r2ZRSESzSome algorithms requires "pip install cryptography". See https://pyjwt.readthedocs.io/en/latest/installation.html#cryptographic-dependencies-optional)jwtr(struuiduuid4updaterr0r1r2r startswithr* exception)r r r rrrrrZ not_beforeZadditional_claimsrr<r,payloadZ str_or_bytesrrrr[s(  z+JwtAssertionCreator.create_normal_assertion)NN)NNr8NNNN)rrr r&rrrrrr/Cs r/)r(r5r3r>logging getLoggerrr*robjectrrr/ZSignerZ JwtSignerrZsign_assertionrrrrs ;