B ��_��@s�ddlZddlZddlmZddlmZmZmZmZm Z ddl mZmZm Z mZddlmZmZmZmZddlmZmZGdd �d �Ze�ZejZejZejZejZejZejZdS) �N)�Mapping)�Any�Dict�List�Optional�Type�)� Algorithm�get_default_algorithms� has_crypto�requires_cryptography)�DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encodec@s�eZdZdZd!dd�Zedd��Zdd�Zd d �Zdd�Z d"e eeee eeejed�dd�Zd#eeeee e eefd�dd�Zd$eeeee ed�dd�Zdd�Zdd�Zd%dd�Zdd�Zdd �ZdS)&�PyJWSZJWTNcCslt�|_|dk rt|�nt|j�|_x(t|j��D]}||jkr4|j|=q4W|dkrZi}|��|�|_dS)N)r �_algorithms�set�_valid_algs�list�keys�_get_default_options�options)�self� algorithmsr�key�r�||jkrtd��t|t�s$td��||j|<|j�|�dS)zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r� ValueError� isinstancer � TypeErrorr�add)r�alg_id�alg_objrrr�register_algorithm+s zPyJWS.register_algorithmcCs*||jkrtd��|j|=|j�|�dS)z� Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)r�KeyErrorr�remove)rr&rrr�unregister_algorithm8s zPyJWS.unregister_algorithmcCs t|j�S)zM Returns a list of supported values for the 'alg' parameter. )rr)rrrr�get_algorithmsFszPyJWS.get_algorithms�HS256)�payloadr� algorithm�headers�json_encoder�returnc Cs�g}|dkrd}||jkr|j|d�}|r>|�|�|�|�tj|d|d��}|�t|��|�t|��d� |�} y$|j |} | �|�}| �| |�}Wn6t k r�ts�|tkr�td|��ntd��YnX|�t|��d� |�}|�d�S) NZnone)�typ�alg)�,�:)Z separators�cls�.zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supportedzutf-8)r� header_typ�_validate_headers�update�json�dumps�encode�appendr�joinr�prepare_keyZsignr)rr�NotImplementedError�decode) rr.rr/r0r1Zsegments�headerZjson_header� signing_inputr'� signatureZencoded_stringrrrr>Ls4 zPyJWS.encode�)�jwtrrrr2cKsb|dkri}|j|�}|d}|r.|s.td��|�|�\}} } }|rV|�| | |||�|| |d�S)Nr!z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r.rDrF)rr �_load�_verify_signature)rrHrrr�kwargsZmerged_optionsr!r.rErDrFrrr�decode_complete�s zPyJWS.decode_completecKs|j||||f|�}|dS)Nr.)rL)rrHrrrrKZdecodedrrrrC�szPyJWS.decodecCs|�|�d}|�|�|S)z�Returns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete �)rIr:)rrHr0rrr�get_unverified_header�s zPyJWS.get_unverified_headerc Cs�t|t�r|�d�}t|t�s,tdt��y$|�dd�\}}|�dd�\}}Wn,tk r|}ztd�|�Wdd}~XYnXyt|�}Wn2t t jfk r�}ztd�|�Wdd}~XYnXyt� |�}Wn0tk r�} ztd| �| �Wdd} ~ XYnXt|t��std��yt|�} Wn4t t jfk �rR}ztd �|�Wdd}~XYnXyt|�}Wn4t t jfk �r�}ztd �|�Wdd}~XYnX| |||fS)Nzutf-8z$Invalid token type. Token must be a r8rzNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r#�strr>�bytesr �rsplit�splitr"rr$�binascii�Errorr<�loadsr)rrHrEZcrypto_segmentZheader_segmentZpayload_segment�errZheader_datarD�er.rFrrrrI�s8 zPyJWS._loadcCsr|�d�}|dk r"||kr"td��y.|j|}|�|�}|�|||�sNtd��Wntk rltd��YnXdS)Nr4z&The specified alg value is not allowedzSignature verification failedzAlgorithm not supported)�getrrrAZverifyrr))rrErDrFrrr4r'rrrrJ�s zPyJWS._verify_signaturecCsd|kr|�|d�dS)N�kid)� _validate_kid)rr0rrrr:�szPyJWS._validate_headerscCst|t�std��dS)Nz(Key ID header parameter must be a string)r#rOr)rrYrrrrZ�s zPyJWS._validate_kid)NN)r-NN)rGNN)rGNN)rGN)�__name__� __module__�__qualname__r9r �staticmethodrr(r+r,rPrOrrrr<ZJSONEncoderr>rrrLrCrNrIrJr:rZrrrrrs0 0+ r)rSr<�collections.abcr�typingrrrrrrr r rr� exceptionsr rrrZutilsrrrZ_jws_global_objr>rLrCr(r+rNrrrr�sf