_P_U@sddlZddlZddlZddlmZddlmZmZddlm Z ddl m Z m Z ddl mZmZmZGdd d eZeZejZejZejZejZejZdS) N)Mapping) Algorithmget_default_algorithms) text_type) DecodeErrorInvalidAlgorithmError)base64url_decodebase64url_encode merge_dictc@seZdZdZddddZeddZddZd d Zd d Z d ddddZ ddddddZ ddZ ddZ ddddZdS)PyJWSZJWTNcCst|_|dk r$t|n t|j|_x6t|jjD]}||jkrL|j|=qLW|s{i}t|j||_dS)N) r _algorithmsset _valid_algslistkeysr _get_default_optionsoptions)self algorithmsrkeyr-/usr/lib/python3/dist-packages/jwt/api_jws.py__init__s zPyJWS.__init__cCs ddiS)Nverify_signatureTrrrrrrszPyJWS._get_default_optionscCsW||jkrtdt|ts6td||j|<|jj|dS)zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r ValueError isinstancer TypeErrorradd)ralg_idalg_objrrrregister_algorithm%s    zPyJWS.register_algorithmcCs9||jkrtd|j|=|jj|dS)z Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)r KeyErrorrremove)rrrrrunregister_algorithm2s  zPyJWS.unregister_algorithmcCs t|jS)zM Returns a list of supported values for the 'alg' parameter. )rr)rrrrget_algorithms>szPyJWS.get_algorithmsZHS256c Csg}|dkrd}||jkr'd|jd|i}|rO|j|tj|dd d|jd}|jt||jt|d j|} y2|j |} | j |}| j | |} Wnt k rt d YnX|jt| d j|S) NZnonetypalgZ separators,:clszutf-8.zAlgorithm not supported)r(r))r header_typupdatejsondumpsencodeappendr joinr prepare_keyZsignr"NotImplementedError) rpayloadr algorithmZheadersZ json_encoderZsegmentsheaderZ json_header signing_inputr signaturerrrr0Ds.      z PyJWS.encodeTc Ksu|j|\}}} } |rat|j|} | jdrq|j||| | ||ntjdt|S)Nrz?The verify parameter is deprecated. Please use options instead.)_loadr rget_verify_signaturewarningswarnDeprecationWarning) rZjwsrverifyrrkwargsr5r8r7r9Zmerged_optionsrrrdecodeks  z PyJWS.decodecCs|j|dS)zReturns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete )r;)rjwtrrrget_unverified_headerzszPyJWS.get_unverified_headerc 2Cst|tr|jd}y4|jdd\}}|jdd\}}Wntk rrtdYnXyt|}Wn'tt j fk rtdYnXyt j |j d}Wn5tk r}ztd|WYdd}~XnXt|tstdyt|} Wn'tt j fk rUtdYnXyt|} Wn'tt j fk rtd YnX| ||| fS) Nzutf-8r+rzNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)rrr0rsplitsplitrrr rbinasciiErrorr.loadsrCr) rrEr8Zcrypto_segmentZheader_segmentZpayload_segmentZ header_datar7er5r9rrrr;s4 # z PyJWS._loadc Cs|d}|dk r.||kr.tdyA|j|}|j|}|j|||sntdWntk rtdYnXdS)Nr'z&The specified alg value is not allowedzSignature verification failedzAlgorithm not supported)rr r3rArr") rr5r8r7r9rrr'r rrrr=s    zPyJWS._verify_signature)__name__ __module__ __qualname__r,r staticmethodrr!r$r%r0rCrFr;r=rrrrr s  &  $r )rIr.r> collectionsrrrrcompatr exceptionsrrZutilsr r r objectr Z_jws_global_objr0rCr!r$rFrrrrs