관리-도구
편집 파일: api_jws.cpython-37.pyc
B ���_� � @ s� d dl Z d dlZd dlmZ d dlmZmZmZmZm Z ddl m Z m Z m Z mZ ddlmZmZmZmZ ddlmZmZ G dd � d �Ze� ZejZejZejZej Z ej Z ej Z dS ) � N)�Mapping)�Any�Dict�List�Optional�Type� )� Algorithm�get_default_algorithms� has_crypto�requires_cryptography)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encodec @ s� e Zd ZdZd!dd�Zedd� �Zdd� Zd d � Zd d � Z d"e e e e e e eej e d�dd�Zd#e e ee e e e ef d�dd�Zd$e e ee e e d�dd�Zdd� Zdd� Zd%dd �Zd d � Zd d � ZdS )&�PyJWSZJWTNc C sl t � | _|d k rt|�nt| j�| _x(t| j�� �D ]}|| jkr4| j|= q4W |d krZi }| �� |�| _d S )N)r � _algorithms�set� _valid_algs�list�keys�_get_default_options�options)�self� algorithmsr �key� r �</opt/alt/python37/lib/python3.7/site-packages/jwt/api_jws.py�__init__ s zPyJWS.__init__c C s ddiS )N�verify_signatureTr r r r r r ' s zPyJWS._get_default_optionsc C s> || j krtd��t|t�s$td��|| j |< | j�|� dS )zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r � ValueError� isinstancer � TypeErrorr �add)r �alg_id�alg_objr r r �register_algorithm+ s zPyJWS.register_algorithmc C s* || j krtd��| j |= | j�|� dS )z� Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r& r r r �unregister_algorithm8 s zPyJWS.unregister_algorithmc C s t | j�S )zM Returns a list of supported values for the 'alg' parameter. )r r )r r r r �get_algorithmsF s zPyJWS.get_algorithms�HS256)�payloadr � algorithm�headers� json_encoder�returnc C s� g }|d krd}|| j kr| j|d�}|r>| �|� |�|� tj|d|d��� }|�t|�� |�t|�� d� |�} y$| j | } | � |�}| � | |�} W n6 t k r� ts�|tkr�td| ��ntd��Y nX |�t| �� d� |�} | �d�S ) NZnone)�typ�alg)�,�:)� separators�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supportedzutf-8)r � header_typ�_validate_headers�update�json�dumps�encode�appendr �joinr � prepare_key�signr) r r �NotImplementedError�decode) r r. r r/ r0 r1 �segments�headerZ json_header� signing_inputr' � signature�encoded_stringr r r r? L s4 z PyJWS.encode� )�jwtr r r r2 c K sb |d kr i }| j |�}|d }|r.|s.td��| �|�\}} } } |rV| �| | | ||� || | d�S )Nr! z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r. rG rI )r r �_load�_verify_signature) r rL r r r �kwargsZmerged_optionsr! r. rH rG rI r r r �decode_complete� s zPyJWS.decode_completec K s | j ||||f|�}|d S )Nr. )rP )r rL r r r rO �decodedr r r rE � s z PyJWS.decodec C s | � |�d }| �|� |S )z�Returns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete � )rM r; )r rL r0 r r r �get_unverified_header� s zPyJWS.get_unverified_headerc C s� t |t�r|�d�}t |t�s,tdt� ���y$|�dd�\}}|�dd�\}}W n, tk r| } ztd�|�W d d }~X Y nX y t|�}W n2 t t j fk r� } ztd�|�W d d }~X Y nX yt � |�}W n0 tk r� } ztd| �| �W d d } ~ X Y nX t |t��std��y t|�} W n4 t t j fk �rR } ztd �|�W d d }~X Y nX y t|�} W n4 t t j fk �r� } ztd �|�W d d }~X Y nX | ||| fS ) Nzutf-8z$Invalid token type. Token must be a r9 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r# �strr? �bytesr �rsplit�splitr" r r$ �binascii�Errorr= �loadsr ) r rL rH Zcrypto_segmentZheader_segmentZpayload_segment�errZ header_datarG �er. rI r r r rM � s8 z PyJWS._loadc C sr |� d�}|d k r"||kr"td��y.| j| }|�|�}|�|||�sNtd��W n tk rl td��Y nX d S )Nr4 z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)�getr r rB Zverifyr r) )r rH rG rI r r r4 r' r r r rN � s zPyJWS._verify_signaturec C s d|kr| � |d � d S )N�kid)� _validate_kid)r r0 r r r r; � s zPyJWS._validate_headersc C s t |t�std��d S )Nz(Key ID header parameter must be a string)r# rT r )r r^ r r r r_ � s zPyJWS._validate_kid)NN)r- NN)rK NN)rK NN)rK N)�__name__� __module__� __qualname__r: r � staticmethodr r( r+ r, rU rT r r r r= � JSONEncoderr? r r rP rE rS rM rN r; r_ r r r r r s0 0 + r ) rX r= �collections.abcr �typingr r r r r r r r r r � exceptionsr r r r �utilsr r r Z_jws_global_objr? rP rE r( r+ rS r r r r �<module> s f