CasperSecurity
o
�l�i # � @ s� d dl Z d dlZd dlmZ d dlmZmZmZmZm Z ddl
m Z m Z m
Z
mZ ddlmZmZmZmZ ddlmZmZ G dd � d �Ze� ZejZejZejZej Z ej Z ej Z dS )
� N)�Mapping)�Any�Dict�List�Optional�Type� )� Algorithm�get_default_algorithms�
has_crypto�requires_cryptography)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encodec
@ s e Zd ZdZd-dd�Zedd� �Zdd� Zd d
� Zd d � Z
d.de
de de e de e
de eej de f dd�Z d/de de dee de
de
e ef f
dd�Z d/de de dee de
de f
d d �Zd d � Zd d!� Z d0d"d#�Zd$hZd%d&�d'd(�Zd)d*� Zd+d,� Z dS )1�PyJWS�JWTNc C sl t � | _|d ur t|�nt| j�| _t| j�� �D ] }|| jvr$| j|= q|d u r+i }i | �� �|�| _d S )N)r
� _algorithms�set� _valid_algs�list�keys�_get_default_options�options)�self�
algorithmsr �key� r �-/usr/lib/python3/dist-packages/jwt/api_jws.py�__init__ s �
�zPyJWS.__init__c C s ddiS )N�verify_signatureTr r r r r r ' s zPyJWS._get_default_optionsc C s> || j v r td��t|t�std��|| j |< | j�|� dS )zW
Registers a new Algorithm for use when creating and verifying tokens.
z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r �
ValueError�
isinstancer � TypeErrorr �add)r �alg_id�alg_objr r r �register_algorithm+ s
zPyJWS.register_algorithmc C s* || j vr td��| j |= | j�|� dS )z�
Unregisters an Algorithm for use when creating and verifying tokens
Throws KeyError if algorithm is not registered.
zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r' r r r �unregister_algorithm8 s
�zPyJWS.unregister_algorithmc C s
t | j�S )zM
Returns a list of supported values for the 'alg' parameter.
)r r )r r r r �get_algorithmsF s
zPyJWS.get_algorithms�HS256�payloadr � algorithm�headers� json_encoder�returnc
C s g }|d u rd}|rd|v r|d r|d }| j |d�}|r1| j|dd� |�|� |d s1|d= tj|d|d��� }|�t|�� |�t|�� d �|�} z| j | }
|
�
|�}|
� | |�} W n t y~ } zt
su|tv rutd
| �| �td �| �d } ~ ww |�t| �� d �|�}
|
�d �S )
N�none�alg)�typr5 T��encodingr6 )�,�:)�
separators�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?�Algorithm not supported�utf-8)�
header_typ�_validate_headers�update�json�dumps�encode�appendr �joinr � prepare_key�signr* r r �NotImplementedError�decode)r r/ r r0 r1 r2 �segments�header� json_header�
signing_inputr( � signature�e�encoded_stringr r r rE L sL
��
���
��
z PyJWS.encode� �jwtr r c K sp |d u ri }i | j �|�}|d }|r|std��| �|�\}} }
} | �|
� |r2| �| |
| ||� ||
| d�S )Nr" z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r/ rM rP )r r
�_loadrA �_verify_signature) r rT r r r �kwargs�merged_optionsr" r/ rO rM rP r r r �decode_complete� s �
�zPyJWS.decode_completec K s | j ||||fi |��}|d S )Nr/ )rY )r rT r r r rW �decodedr r r rK � s z PyJWS.decodec C s | � |�d }| �|� |S )z�Returns back the JWT header parameters as a dict()
Note: The signature is not verified so the header parameters
should not be fully trusted until signature verification is complete
� )rU rA )r rT r1 r r r �get_unverified_header� s
zPyJWS.get_unverified_headerc
C sj t |t�r
|�d�}t |t�stdt� ���z|�dd�\}}|�dd�\}}W n ty9 } ztd�|�d }~ww zt|�}W n t t
j fyT } ztd�|�d }~ww zt �
|�}W n tyo } ztd| �| �d } ~ ww t |t�sytd��zt|�}
W n t t
j fy� } ztd �|�d }~ww zt|�} W n t t
j fy� } ztd
�|�d }~ww |
||| fS ) Nr? z$Invalid token type. Token must be a r= r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r$ �strrE �bytesr
�rsplit�splitr# r r% �binascii�ErrorrC �loadsr ) r rT rO �crypto_segment�header_segment�payload_segment�err� header_datarM rQ r/ rP r r r rU � sL
��
����
��
�� z PyJWS._loadc
C sv |� d�}|d ur||vrtd��z| j| }|�|�}|�|||�s'td��W d S ty: } ztd�|�d }~ww )Nr5 z&The specified alg value is not allowedz Signature verification failedr> )�getr r rH �verifyr r* ) r rO rM rP r r r5 r( rQ r r r rV � s
�
��zPyJWS._verify_signature�b64Fr7 c C s8 d|v r | � |d � |sd|v r| �|� d S d S d S )N�kid�crit)�
_validate_kid�_validate_crit)r r1 r8 r r r rA � s
�zPyJWS._validate_headersc C s t |t�s td��d S )Nz(Key ID header parameter must be a string)r$ r] r )r rl r r r rn s
�zPyJWS._validate_kidc C sv |d }t |t�rt|�dkrtd��|D ]#}t |t�s td��|| jvr,td|� ���||vr8td|� d���qd S )Nrm r z/Invalid 'crit' header: must be a non-empty listz-Invalid 'crit' header: values must be stringsz Unsupported critical extension: zCritical extension 'z' is missing from headers)r$ r �lenr r] �_supported_crit)r r1 rm �extr r r ro s
���zPyJWS._validate_crit)NN)r. NN)rS NN)rS N) �__name__�
__module__� __qualname__r@ r! � staticmethodr r) r, r- r^ r] r r r rC � JSONEncoderrE r r rY rK r\ rU rV rq rA rn ro r r r r r s|
����� �
�:�����
�"�����
� +
� � r ) ra rC �collections.abcr �typingr r r r r r r r
r r �
exceptionsr
r r r �utilsr r r �_jws_global_objrE rY rK r) r, r\ r r r r �<module> s"