3
kZ @ s d dl Z d dlZd dlZd dlmZ ddlmZmZmZm Z ddl
m Z m Z m
Z
ddlmZmZmZmZ ddlmZmZmZmZ G dd d eZe ZejZej Z ej Z ej Z ej Z dS )
N)Mapping ) Algorithmget_default_algorithms
has_cryptorequires_cryptography) binary_type string_types text_type) DecodeErrorInvalidAlgorithmErrorInvalidSignatureErrorInvalidTokenError)base64url_decodebase64url_encode force_bytes
merge_dictc @ s| e Zd ZdZd ddZedd Zdd Zd d
Zd d Z d ddZ
d ddZ dd Z dd Z
d!ddZdd Zd d ZdS )"PyJWSZJWTNc C sj t | _|d k rt|nt| j| _x(t| jj D ]}|| jkr4| j|= q4W |sVi }t| j || _d S )N) r _algorithmsset _valid_algslistkeysr _get_default_optionsoptions)self
algorithmsr key r /usr/lib/python3.6/api_jws.py__init__ s
zPyJWS.__init__c C s ddiS )Nverify_signatureTr r r r r r # s zPyJWS._get_default_optionsc C s> || j krtdt|ts$td|| j |< | jj| dS )zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r
ValueError
isinstancer TypeErrorr add)r alg_idalg_objr r r register_algorithm) s
zPyJWS.register_algorithmc C s* || j krtd| j |= | jj| dS )z
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r KeyErrorr remove)r r& r r r unregister_algorithm6 s
zPyJWS.unregister_algorithmc C s
t | jS )zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r r r get_algorithmsB s zPyJWS.get_algorithmsHS256c C s g }|d krd}|| j kr| j|d}|r>| j| |j| ttj|d |d}|jt| |jt| dj |} y$| j
| }
|
j |}|
j | |} W n8 t
k
r t r|tkrtd| ntdY nX |jt| dj |S )
NZnone)typalg,:)Z
separatorscls .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supported)r0 r1 )r
header_typ_validate_headersupdater jsondumpsappendr joinr prepare_keyZsignr) r r NotImplementedError) r payloadr algorithmheadersZ json_encoderZsegmentsheaderZ json_header
signing_inputr' signaturer r r encodeH s8
z PyJWS.encode Tc
K sn t | j|}|d }|r*| r*tjd t | j|\} }
} } |sRtjdtdd n|rj| j| |
| | || | S )
Nr! z.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.zSThe verify parameter is deprecated. Please use verify_signature in options instead. )
stacklevelziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). zIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)r r warningswarnDeprecationWarning_load_verify_signature)
r Zjwsr verifyr r kwargsZmerged_optionsr! r= rA r@ rB r r r decodex s
z PyJWS.decodec C s | j |d }| j| |S )zReturns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
rE )rJ r5 )r jwtr? r r r get_unverified_header s
zPyJWS.get_unverified_headerc 2 C sh t |tr|jd}tt|ts0tdjty$|jdd\}}|j dd\}}W n t
k
rp tdY nX y t |}W n" t t
jfk
r tdY nX ytj|jd}W n. t
k
r } ztd| W Y d d }~X nX t |tstdy t |} W n$ t t
jfk
r( td Y nX y t |}
W n$ t t
jfk
rZ td
Y nX | |||
fS ) Nzutf-8z'Invalid token type. Token must be a {0}r3 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r# r
rC
issubclasstyper r formatrsplitsplitr" r r$ binasciiErrorr7 loadsrN r ) r rO rA Zcrypto_segmentZheader_segmentZpayload_segmentZ header_datar@ er= rB r r r rJ s:
z PyJWS._loadc C sr |j d}|d k r"||kr"tdy.| j| }|j|}|j|||sNtdW n tk
rl tdY nX d S )Nr/ z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)getr r r; rL r
r) ) r r= rA r@ rB r r r/ r' r r r rK s
zPyJWS._verify_signaturec C s d|kr| j |d d S )Nkid)
_validate_kid)r r? r r r r5 s zPyJWS._validate_headersc C s t |tstdd S )Nz(Key ID header parameter must be a string)r# r r )r r[ r r r r\ s
zPyJWS._validate_kid)NN)r- NN)rD TNN)rD N)__name__
__module__ __qualname__r4 r staticmethodr r( r+ r, rC rN rP rJ rK r5 r\ r r r r r s
/
(
r ) rV r7 rG collectionsr r r r r r compatr r r
exceptionsr r r
r Zutilsr r r r objectr Z_jws_global_objrC rN r( r+ rP r r r r s O