3
}:aY7 @ s d Z ddlZddlZddlZddlZddlmZmZmZm Z m
Z
m Z G dd dZ G dd dej
ZG dd d ej
ZG d
d d ej
ZG d d
d
Zedkreej dS )zJSON Web Signature. N)b64errors json_utiljwajwkutilc @ s, e Zd ZdZdZedd Zedd ZdS ) MediaTypez MediaType field encoder/decoder.z application/c C s( d|kr$d|krt jd| j| S |S )zDecoder./;zUnexpected semi-colon)r DeserializationErrorPREFIX)clsvalue r /usr/lib/python3.6/jws.pydecode s
zMediaType.decodec C s d|kr|t | jd S |S )zEncoder.r
N)lenr )r
r r r r encode s zMediaType.encodeN)__name__
__module__ __qualname____doc__r classmethodr r r r r r r s
r c @ s e Zd ZdZejdejjddZ ejdddZ
ejde j jddZ ejdddZ
ejd ddZejd
df d Zejd ejddZejd
ejddZejdejejddZejdejejddZejddf d Zdd Zdd Zdd Zej dd Zej dd Zej d d Zd S ) Headera6 JOSE Header.
.. warning:: This class supports **only** Registered Header
Parameter Names (as defined in section 4.1 of the
protocol). If you need Public Header Parameter Names (4.2)
or Private Header Parameter Names (4.3), you must subclass
and override :meth:`from_json` and :meth:`to_partial_json`
appropriately.
.. warning:: This class does not support any extensions through
the "crit" (Critical) Header Parameter (4.1.11) and as a
conforming implementation, :meth:`from_json` treats its
occurrence as an error. Please subclass if you seek for
a different behaviour.
:ivar x5tS256: "x5t#S256"
:ivar str typ: MIME Media Type, inc. :const:`MediaType.PREFIX`.
:ivar str cty: Content-Type, inc. :const:`MediaType.PREFIX`.
algT)decoder omitemptyjku)r r kidx5ux5c)r defaultx5tzx5t#S256typ)encoderr r ctycritc s fdd j j D S )z4Fields that would not be omitted in the JSON object.c s, i | ]$\}}|j t |st ||qS r )Zomitgetattr).0nameZfield)selfr r
M s z&Header.not_omitted..)_fieldsitems)r* r )r* r not_omittedK s
zHeader.not_omittedc C s^ t |t| s tdjt|| j }|j }t|j|rFtd|j| t| f |S )Nz Header cannot be added to: {0}z+Addition of overlapping headers not defined)
isinstancetype TypeErrorformatr. set intersectionupdate)r* otherZnot_omitted_selfZnot_omitted_otherr r r __add__Q s
zHeader.__add__c C s | j dkrtjd| j S )zFind key based on header.
.. todo:: Supports only "jwk" header parameter lookup.
:returns: (Public) key found in the header.
:rtype: .JWK
:raises josepy.errors.Error: if key could not be found
Nz No key found)r r Error)r* r r r find_key_ s
zHeader.find_keyc C s t jdd S )Nz("crit" is not supported, please subclass)r r )Z unused_valuer r r r& n s z Header.critc C s dd | D S )Nc S s& g | ] }t jtjjtjj|jqS r )base64 b64encodeOpenSSLcryptoZdump_certificate
FILETYPE_ASN1wrapped)r( certr r r
x s z Header.x5c..r )r r r r r v s z
Header.x5cc C sH yt dd | D S tjjk
rB } ztj|W Y d d }~X nX d S )Nc s s, | ]$}t jtjjtjjtj|V qd S )N)r ZComparableX509r< r= Zload_certificater> r: b64decode)r( r@ r r r ~ s z Header.x5c..)tupler< r= r8 r r )r errorr r r r { s
N) r r r r r Fieldr JWASignature from_jsonr r r JWKr r r decode_b64joser" Zx5tS256r r r r# r% r& r. r7 r9 r r$ r r r r r % s.
r c s e Zd ZdZeZd ZejddddZ ejdde ej
dZ ejd ej ej
d
Ze jd d Z e jd
d Z fddZedd Zedd Zd ddZede fddZ fddZe fdd Z ZS ) Signaturea JWS Signature.
:ivar combined: Combined Header (protected and unprotected,
:class:`Header`).
:ivar unicode protected: JWS protected header (Jose Base-64 decoded).
:ivar header: JWS Unprotected Header (:class:`Header`).
:ivar str signature: The signature.
combined protectedT )r r! header)r r! r signature)r r$ c C s t j| jdS )Nzutf-8)r encode_b64joser )r r r r rM s zSignature.protectedc C s t j| jdS )Nzutf-8)r rJ r )r r r r rM s c s$ d|kr| j |}t jf | d S )NrL )_with_combinedsuper__init__)r* kwargs) __class__r r rT s
zSignature.__init__c C sN |j d| jd j}|j d| jd j}|r>|| jj| }n|}||d< |S )NrO rM rL )getr, r!
header_cls
json_loads)r
rU rO rM rL r r r rR s zSignature._with_combinedc C s t j|jdd t j| S )Nzutf-8 .)r r; r )r
rM payloadr r r _msg s zSignature._msgNc C s8 |dkr| j j n|}| j jj|j| j| j| j|dS )zEVerify.
:param JWK key: Key used for verification.
N)keysigmsg)rL r9 r verifyr] rP r\ rM )r* r[ r] r r r r` s zSignature.verifyc K s |}||d< |r |j |d< i }x"|D ]} | |kr&|j| || < q&W |rZ| jf |j }
nd}
| jf |} |j|j| j|
|} | |
| | dS )z;Sign.
:param JWK key: Key for signature.
r r rN )rM rO rP )
public_keypoprX Z
json_dumpssignr] r\ ) r
r[ r] r Z include_jwkprotectrU Z
header_paramsZprotected_paramsrO rM rP r r r rc s
zSignature.signc s t j }|d j s |d= |S )NrO )rS fields_to_partial_jsonr. )r* fields)rV r r re s
z Signature.fields_to_partial_jsonc s4 t j|}| j|}d|d j kr0tjd|S )Nr rL zalg not present)rS fields_from_jsonrR r. r r )r
jobjrf Zfields_with_combined)rV r r rg s
zSignature.fields_from_json)rL )N)r r r r r rX __slots__r rF rM rH rO rJ rQ rP r$ r rT r rR r\ r` frozensetrc re rg
__classcell__r r )rV r rK s*
rK c @ sd e Zd ZdZdZeZdddZedd Z e
d d
Z d d Z ed
d Z
dddZedd ZdS )JWSzgJSON Web Signature.
:ivar str payload: JWS Payload.
:ivar str signature: JWS Signatures.
r[
signaturesNc s t fddjD S )zVerify.c 3 s | ]}|j j V qd S )N)r` r[ )r( r^ )r] r* r r rC s z JWS.verify..)allrm )r* r] r )r] r* r r` s z
JWS.verifyc K s | || j jf d|i|fdS )zSign.r[ )r[ rm )
signature_clsrc )r
r[ rU r r r rc s zJWS.signc C s
| j d S )zPGet a singleton signature.
:rtype: :class:`JWS.signature_cls`
r )rm )r* r r r rP s z
JWS.signaturec C s6 t j| jjjdd t j| j d t j| jj S )z7Compact serialization.
:rtype: bytes
zutf-8rZ )r r; rP rM r r[ )r* r r r
to_compact s &zJWS.to_compactc C sh y|j d\}}}W n tk
r2 tjdY nX | jtj|jdtj|d}| tj||fdS )zACompact deserialization.
:param bytes compact:
rZ zOCompact JWS serialization should comprise of exactly 3 dot-separated componentszutf-8)rM rP )r[ rm )split
ValueErrorr r ro r rB r )r
compactrM r[ rP r^ r r r from_compact( s zJWS.from_compactTc C sH t j| j}|r8t| jdkr8| jd j }||d< |S || jdS d S )N r r[ )r[ rm )r rQ r[ r rm to_partial_json)r* Zflatr[ retr r r rv ; s zJWS.to_partial_jsonc sv d|kr d|kr t jdnVd|krF tj|jd jj|fdS tj|d t fdd|d D dS d S )NrP rm zFlat mixed with non-flatr[ )r[ rm c 3 s | ]} j j|V qd S )N)ro rH )r( r^ )r
r r rC R s z JWS.from_json..)r r r rJ rb ro rH rD )r
rh r )r
r rH I s z
JWS.from_json)r[ rm )N)T)r r r r ri rK ro r` r rc propertyrP rp rt rv rH r r r r rl s
rl c @ sZ e Zd ZdZedd Zedd Zedd Zedd Zed
d Z edd
dZ
d S )CLIzJWS CLI.c C s |j jj|jj }|jj |jdkr.g |_|jr@|jjd t j
t j j j
||j t|jd}|jr~t|j jd n t|j dS )zSign.Nr )r[ r] r rd zutf-8)r ktyloadr] readcloserd rs appendrl rc sysstdinr r3 printrp r Zjson_dumps_pretty)r
argsr] r^ r r r rc Y s
zCLI.signc C s |j r tjtjj j }n@ytjtjj }W n* tj k
rZ } z t
| dS d}~X nX |j dk r|j j
|j j j }|j j nd}tjj|j |j|d S )zVerify.ru N)r] )rs rl rt r r r| r rY r r8 r r] rz r{ ra r} stdoutwriter[ r` )r
r r^ rE r] r r r r` k s
z
CLI.verifyc C s t jj|S )N)r rG rH )r
argr r r _alg_type s z
CLI._alg_typec C s |S )Nr )r
r r r r _header_type s zCLI._header_typec C s t jj| S )N)r rI ZTYPES)r
r r r r _kty_type s z
CLI._kty_typeNc C s |dkrt jdd }tj }|jddd |j }|jd}|j| jd |jdd tj d
d d |jd
d| j
t j d |jddd| j
d |jd}|j| jd |jdd tj d
dd |jd| jdd |j|}|j|S )z Parse arguments and sign/verify.Nru z --compact
store_true)actionrc )funcz-kz--keyrbT)r0 Zrequiredz-az--alg)r0 r! z-pz --protectr~ )r r0 r` Fz--kty)r argvargparseArgumentParser add_argumentZadd_subparsersZ
add_parserZ set_defaultsrc ZFileTyper r ZRS256r r` r
parse_argsr )r
r parserZ
subparsersZ parser_signZ
parser_verifyZparsedr r r run s*
zCLI.run)N) r r r r r rc r` r r r r r r r r ry V s ry __main__)r r r: r r< Zjosepyr r r r r r r ZJSONObjectWithFieldsr rK rl ry r exitr r r r r s `r_V