CasperSecurity
o
K�ja� � @ s� d dl Z d dlmZ d dlmZmZ d dlmZmZmZ d dl m
Z
m Z m Z m
Z
mZmZ ddlmZ ddlmZmZmZmZmZmZmZ G d d
� d
�Ze� Zej Z ej Z ej Z dS ) � N)�timegm)�Iterable�Mapping)�datetime� timedelta�timezone)�Any�Dict�List�Optional�Type�Union� )�api_jws)� DecodeError�ExpiredSignatureError�ImmatureSignatureError�InvalidAudienceError�InvalidIssuedAtError�InvalidIssuerError�MissingRequiredClaimErrorc
@ s e Zd Zd&dd�Zedeeeee e f f fdd��Z
d'deee f d ed
e e d e e d e e
ej def d
d�Z d(ded ede e dedeee f f
dd�Z d(ded ede e dedeee f f
dd�Z d)dd�Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� ZdS )*�PyJWTNc C s" |d u ri }i | � � �|�| _d S �N)�_get_default_options�options)�selfr � r �-/usr/lib/python3/dist-packages/jwt/api_jwt.py�__init__ s zPyJWT.__init__�returnc C s ddddddg d�S )NT)�verify_signature�
verify_exp�
verify_nbf�
verify_iat�
verify_aud�
verify_iss�requirer r r r r r s �zPyJWT._get_default_options�HS256�payload�key� algorithm�headers� json_encoderc C sp t |t�s td��|�� }dD ]}t |�|�t�r#t|| �� �||< qtj |d|d��
d�}t �
|||||�S )NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.)�exp�iat�nbf)�,�:)�
separators�clszutf-8) �
isinstancer � TypeError�copy�getr r � utctimetuple�json�dumps�encoder )r r( r) r* r+ r, �
time_claim� json_payloadr r r r; % s
����z PyJWT.encode� �jwt�
algorithmsr c
K s |d u r ddi}n|� dd� |d s1|� dd� |� dd� |� dd� |� dd� |� dd� |d r;|s;td ��tj|f|||d
�|��}z t�|d �}W n tyc } ztd | ��d }~ww t|t�smtd
��i | j �|�} | j
|| fi |�� ||d < |S )Nr Tr! Fr" r# r$ r% z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r) r@ r r( zInvalid payload string: %sz-Invalid payload string: must be a json object) �
setdefaultr r �decode_completer9 �loads�
ValueErrorr4 �dictr �_validate_claims)
r r? r) r@ r �kwargs�decodedr( �e�merged_optionsr r r rB A sD
���� ��
zPyJWT.decode_completec K s | j ||||fi |��}|d S )Nr( )rB )r r? r) r@ r rG rH r r r �decodeo s z PyJWT.decoder c K s� t |t�r |�� }t |tttd �tf�std��| �||� t t
j t j
d��� �}d|v r8|d r8| �|||� d|v rG|d rG| �|||� d|v rV|d rV| �|||� |d r`| �||� |d
rl| �||� d S d S ) Nz,audience must be a string, iterable, or None)�tzr. r# r/ r" r- r! r% r$ )r4 r �
total_seconds�bytes�str�typer r5 �_validate_required_claimsr r �nowr �utcr8 �
_validate_iat�
_validate_nbf�
_validate_exp�
_validate_iss�
_validate_aud)r r( r �audience�issuer�leewayrG rR r r r rF z s"
�zPyJWT._validate_claimsc C s( |d D ]
}|� |�d u rt|��qd S )Nr& )r7 r )r r( r �claimr r r rQ � s
��z PyJWT._validate_required_claimsc C s* z t |d � W d S ty td��w )Nr. z)Issued At claim (iat) must be an integer.)�intrD r )r r( rR r[ r r r rT � s
�zPyJWT._validate_iatc C s@ zt |d �}W n ty td��w ||| kr td��d S )Nr/ z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))r] rD r r )r r( rR r[ r/ r r r rU � � � �zPyJWT._validate_nbfc C s@ zt |d �}W n ty td��w ||| k r td��d S )Nr- z/Expiration Time claim (exp) must be an integer.zSignature has expired)r] rD r r )r r( rR r[ r- r r r rV � r^ zPyJWT._validate_expc s� |d u rd|vs |d sd S t d��d|vs|d s td��|d � t� t�r*� g� t� t�s3t d��tdd� � D ��r@t d��t|t�rH|g}t� fdd�|D ��rWt d��d S )N�audzInvalid audiencez Invalid claim format in tokenc s s � | ] }t |t� V qd S r )r4 rO )�.0�cr r r � <genexpr>� s � z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s � | ]}|� vV qd S r r )r` r_ ��audience_claimsr r rb � s � )r r r4 rO �list�any�all)r r( rY r rc r rX � s$
�zPyJWT._validate_audc C s4 |d u rd S d|vrt d��|d |krtd��d S )N�isszInvalid issuer)r r )r r( rZ r r r rW � s �zPyJWT._validate_issr )r' NN)r> NN)NNr )�__name__�
__module__� __qualname__r � staticmethodr rO r
�boolr
r r r r r9 � JSONEncoderr; rB rK rF rQ rT rU rV rX rW r r r r r sp
$�
���� �
� �����
�1�����
�
� r ) r9 �calendarr �collections.abcr r r r r �typingr r r
r r r
r> r �
exceptionsr r r r r r r r �_jwt_global_objr; rB rK r r r r �<module> s $ H