3
kZ @ s d dl Z d dlZd dlmZ d dlmZmZ d dlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ dd lmZmZmZmZmZmZmZ dd
lmZ G d d d e
Ze Zej Z ej Z ej Z ej Z ej Z dS )
N)timegm)IterableMapping)datetime timedelta )PyJWS) Algorithmget_default_algorithms) string_types) DecodeErrorExpiredSignatureErrorImmatureSignatureErrorInvalidAudienceErrorInvalidIssuedAtErrorInvalidIssuerErrorMissingRequiredClaimError)
merge_dictc sv e Zd ZdZedd Zd fdd Zd fd
d Zd d
dZdd Z dd Z
dd Z dd Z dd Z
dd Z ZS ) PyJWTZJWTc
C s dddddddddd S )NTF) verify_signature
verify_exp
verify_nbf
verify_iat
verify_aud
verify_iss require_exp require_iat require_nbf r r r /usr/lib/python3.6/api_jwt.py_get_default_options s zPyJWT._get_default_optionsHS256Nc sr t |tstdx0d D ](}t |j|trt|| j ||< qW tj|d
|dj d}t
t | j |||||S ) NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.expiatnbf,:)Z
separatorsclszutf-8)r" r# r$ )r% r& )
isinstancer TypeErrorgetr r utctimetuplejsondumpsencodesuperr )selfpayloadkey algorithmZheadersZ json_encoderZ
time_claimZ json_payload) __class__r r r. # s
z PyJWT.encode Tc s |r| rt jd
t | j|\}}} }
|d kr:d|i}n |jd| tt| j|f|||d|} ytj | jd}W n. t
k
r } zt d| W Y d d } ~ X nX t |t
st d|rt| j|}
| j||
f| |S ) Nz.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.r )r2
algorithmsoptionszutf-8zInvalid payload string: %sz-Invalid payload string: must be a json objectziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). zIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)warningswarnDeprecationWarning_load
setdefaultr/ r decoder, loads
ValueErrorr r( r r r7 _validate_claims)r0 Zjwtr2 Zverifyr6 r7 kwargsr1 Z
signing_inputheaderZ signatureZdecodedeZmerged_options)r4 r r r= : s*
z PyJWT.decoder c K s d|kr$|j dd|d< tjdt t|tr6|j }t|ttd t fsRt
d| j || t t
j j }d|kr|j dr| j||| d|kr|j d r| j||| d
|kr|j dr| j||| |j d r| j|| |j d r| j|| d S )
NZverify_expirationTr zXThe verify_expiration parameter is deprecated. Please use verify_exp in options instead.z,audience must be a string, iterable, or Noner# r r$ r r" r r )r* r8 r9 r: r( r Z
total_secondsr typer r) _validate_required_claimsr r Zutcnowr+
_validate_iat
_validate_nbf
_validate_exp
_validate_iss
_validate_aud)r0 r1 r7 audienceissuerleewayrA nowr r r r@ ] s(
zPyJWT._validate_claimsc C sd |j dr |j dd kr td|j dr@|j dd kr@td|j dr`|j dd kr`tdd S )Nr r" r r# r r$ )r* r )r0 r1 r7 r r r rE s z PyJWT._validate_required_claimsc C s2 yt |d W n tk
r, tdY nX d S )Nr# z)Issued At claim (iat) must be an integer.)intr? r )r0 r1 rN rM r r r rF s zPyJWT._validate_iatc C sF yt |d }W n tk
r, tdY nX ||| krBtdd S )Nr$ z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rO r? r r )r0 r1 rN rM r$ r r r rG s zPyJWT._validate_nbfc C sF yt |d }W n tk
r, tdY nX ||| k rBtdd S )Nr" z/Expiration Time claim (exp) must be an integer.zSignature has expired)rO r? r r
)r0 r1 rN rM r" r r r rH s zPyJWT._validate_expc s |d krd|krd S |d k r,d|kr,t d|d krDd|krDtd|d t tr\ g t tsntdtdd D rtdt|tr|g}t fdd|D stdd S )NaudzInvalid audiencez Invalid claim format in tokenc s s | ]}t |t V qd S )N)r( r ).0cr r r s z&PyJWT._validate_aud..c 3 s | ]}| kV qd S )Nr )rQ rP )audience_claimsr r rS s )r r r( r listany)r0 r1 rK r )rT r rJ s"
zPyJWT._validate_audc C s4 |d kr d S d|kr t d|d |kr0tdd S )NZisszInvalid issuer)r r )r0 r1 rL r r r rI s zPyJWT._validate_iss)r! NN)r5 TNN)NNr )__name__
__module__ __qualname__Z header_type staticmethodr r. r= r@ rE rF rG rH rJ rI
__classcell__r r )r4 r r s #
!
r )!r, r8 Zcalendarr collectionsr r r r Zapi_jwsr r6 r r
compatr
exceptionsr r
r r r r r Zutilsr r Z_jwt_global_objr. r= Zregister_algorithmZunregister_algorithmZget_unverified_headerr r r r s" $ 9