File: //usr/lib/python3.6/site-packages/jwt/__pycache__/api_jws.cpython-36.pyc
3
�k�Z� � @ s� d dl Z d dlZd dlZd dlmZ ddlmZmZmZm Z ddl
m Z m Z m
Z
ddlmZmZmZmZ ddlmZmZmZmZ G dd � d e�Ze� ZejZej Z ej Z ej Z ej Z dS )
� N)�Mapping� )� Algorithm�get_default_algorithms�
has_crypto�requires_cryptography)� binary_type� string_types� text_type)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encode� force_bytes�
merge_dictc @ s| e Zd ZdZd dd�Zedd� �Zdd� Zd d
� Zd d � Z d dd�Z
d dd�Z dd� Z dd� Z
d!dd�Zdd� Zd d � ZdS )"�PyJWSZJWTNc C sj t � | _|d k rt|�nt| j�| _x(t| jj� �D ]}|| jkr4| j|= q4W |sVi }t| j� |�| _d S )N) r � _algorithms�set� _valid_algs�list�keysr �_get_default_options�options)�self�
algorithmsr �key� r � /usr/lib/python3.6/api_jws.py�__init__ s
zPyJWS.__init__c C s ddiS )N�verify_signatureTr r r r r r # s zPyJWS._get_default_optionsc C s> || j krtd��t|t�s$td��|| j |< | jj|� dS )zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r �
ValueError�
isinstancer � TypeErrorr �add)r �alg_id�alg_objr r r �register_algorithm) s
zPyJWS.register_algorithmc C s* || j krtd��| j |= | jj|� dS )z�
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r& r r r �unregister_algorithm6 s
zPyJWS.unregister_algorithmc C s
t | j�S )zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r r r �get_algorithmsB s zPyJWS.get_algorithms�HS256c C s� g }|d krd}|| j kr| j|d�}|r>| j|� |j|� ttj|d |d��}|jt|�� |jt|�� dj |�} y$| j
| }
|
j |�}|
j | |�} W n8 t
k
r� t r�|tkr�td| ��ntd��Y nX |jt| �� dj |�S )
NZnone)�typ�alg�,�:)Z
separators�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supported)r0 r1 )r �
header_typ�_validate_headers�updater �json�dumps�appendr �joinr � prepare_keyZsignr) r r �NotImplementedError) r �payloadr � algorithm�headersZ json_encoderZsegments�headerZ json_header�
signing_inputr' � signaturer r r �encodeH s8
z PyJWS.encode� Tc
K sn t | j|�}|d }|r*| r*tjd t� | j|�\} }
} } |sRtjdtdd� n|rj| j| |
| | ||� | S )
Nr! z.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.zSThe verify parameter is deprecated. Please use verify_signature in options instead.� )�
stacklevelziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). z�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)r r �warnings�warn�DeprecationWarning�_load�_verify_signature)
r Zjwsr �verifyr r �kwargsZmerged_optionsr! r= rA r@ rB r r r �decodex s
z PyJWS.decodec C s | j |�d }| j|� |S )z�Returns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
rE )rJ r5 )r �jwtr? r r r �get_unverified_header� s
zPyJWS.get_unverified_headerc 2 C sh t |t�r|jd�}tt|�t�s0tdjt���y$|jdd�\}}|j dd�\}}W n t
k
rp td��Y nX y t |�}W n" t t
jfk
r� td��Y nX ytj|jd��}W n. t
k
r� } ztd| ��W Y d d }~X nX t |t�s�td��y t |�} W n$ t t
jfk
�r( td ��Y nX y t |�}
W n$ t t
jfk
�rZ td
��Y nX | |||
fS ) Nzutf-8z'Invalid token type. Token must be a {0}r3 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r# r
rC �
issubclass�typer r �format�rsplit�splitr" r r$ �binascii�Errorr7 �loadsrN r ) r rO rA Zcrypto_segmentZheader_segmentZpayload_segmentZ header_datar@ �er= rB r r r rJ � s:
z PyJWS._loadc C sr |j d�}|d k r"||kr"td��y.| j| }|j|�}|j|||�sNtd��W n tk
rl td��Y nX d S )Nr/ z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)�getr r r; rL r
r) ) r r= rA r@ rB r r r/ r' r r r rK � s
zPyJWS._verify_signaturec C s d|kr| j |d � d S )N�kid)�
_validate_kid)r r? r r r r5 � s zPyJWS._validate_headersc C s t |t�std��d S )Nz(Key ID header parameter must be a string)r# r r )r r[ r r r r\ � s
zPyJWS._validate_kid)NN)r- NN)rD TNN)rD N)�__name__�
__module__� __qualname__r4 r � staticmethodr r( r+ r, rC rN rP rJ rK r5 r\ r r r r r s
/
(
r ) rV r7 rG � collectionsr r r r r r �compatr r r
�
exceptionsr r r
r Zutilsr r r r �objectr Z_jws_global_objrC rN r( r+ rP r r r r �<module> s O