o

�h��@s
dd
lZdd
l
Z
dd
lZz
ddlmZ
d&dd�
ZWney-


ddlm	Z
d&dd�
ZYn
wd&dd�
Z
d	d
�Zdd�Zd
d�Z
dd�Zdd�Zdd�Zdd�Zhd�
Ze
�dd�dd�eD�
�
d�
Zdedefdd �Zd!Ze
�d"�
Zgd#�
Zdedefd$d%�Zd
S)'�N)
�int_to_bytescCst||
pd�S�
N)
�_long_to_bytes)�
n�	blocksize�r�=/usr/local/CyberCP/lib/python3.10/site-packages/jose/utils.py�
long_to_bytes
�
r	)
�
int_to_stringcCs<t|�
}|
d
kr
|St
|�
|
k
sJ�
|
t
|�
}d||S)Nr
�
)r�len)rr�ret�paddingrrrr	s




cCst�
t||
��
�d
�
S)N�
=)�base64�urlsafe_b64encoder	�strip)�data�sizerrr�long_to_base64s
rc

Cstd
�
dd�|D�
�
d�S)N�c
Ssg|]}
d|
�qS)
z%02xr)�.0�byterrr�
<listcomp>sz#int_arr_to_long.<locals>.<listcomp>�)�int�join)
�arrrrr�int_arr_to_longs
rc
Cs>t|t
�r
|�d
�
}t�t|�
d�
}
tt�dt	|
�
|
��
S)N�asciis==z%sB)
�
isinstance�str�encoder�urlsafe_b64decode�bytesr�struct�unpackr
)r�_drrr�base64_to_long"s




r)cCs@|
|�d
�
�
�
�}tt|�
d�
}|d|�}t|�
}|�d
�
S)a�Helper method for calculating an access token
    hash, as described in http://openid.net/specs/openid-connect-core-1_0.html#CodeIDToken

    Its value is the base64url encoding of the left-most half of the hash of the octets
    of the ASCII representation of the access_token value, where the hash algorithm
    used is the hash algorithm used in the alg Header Parameter of the ID Token's JOSE
    Header. For instance, if the alg is RS256, hash the access_token value with SHA-256,
    then take the left-most 128 bits and base64url encode them. The at_hash value is a
    case sensitive string.

    Args:
        access_token (str): An access token string.
        hash_alg (callable): A callable returning a hash object, e.g. hashlib.sha256

    �utf-8�N)r#�digestrr
�base64url_encode�decode)�access_token�hash_alg�hash_digest�cut_at�	truncated�at_hashrrr�calculate_at_hash+s





r5c
Cs.t|�
d
}
|
dkr|dd
|
7}t
�|�
S)zwHelper method to base64url_decode a string.

    Args:
        input (str): A base64url_encoded string to decode.

    �r
r)r
rr$)�input�remrrr�base64url_decodeBs

r9c

Cst�
|�
�d
d�S)zwHelper method to base64url_encode a string.

    Args:
        input (str): A base64url_encoded string to encode.

    r�)rr�replace)
r7rrrr-Qsr-c

Cs|jd
dd|j
S)z�Helper method to determine the total number of seconds
    from a timedelta.

    Args:
        delta (timedelta): A timedelta to convert to seconds.
    ��<)�days�seconds)
�deltarrr�timedelta_total_seconds[srAc

Cs8t|t
�r|St|t�r|�d
d�Stdt|�
�d��
�
)zCoerce **s** to bytes.r*�strictznot expecting type '�
')r!r%r"r#�	TypeError�type)
�
srrr�
ensure_binaryes






rG>�X509 CRL�
PUBLIC KEY�CERTIFICATE�PRIVATE KEY�
DH PARAMETERS�EC PRIVATE KEY�RSA PUBLIC KEY�DSA PRIVATE KEY�RSA PRIVATE KEY�SSH2 PUBLIC KEY�CERTIFICATE REQUEST�OPENSSH PRIVATE KEY�TRUSTED CERTIFICATE�ENCRYPTED PRIVATE KEY�NEW CERTIFICATE REQUEST�SSH2 ENCRYPTED PRIVATE KEYs----[- ]BEGIN (�
|c
cs�|]}
t�
|
�
V
qdSr)�re�escape)r�pemrrr�	<genexpr>�s�r\s	)[- ]----�key�returnc

Cstt
�|�
�
Sr)�bool�_PEM_RE�search�
r]rrr�
is_pem_format�r
rcs-cert-v01@openssh.coms\A(\S+)[ \t]+(\S+))sssh-ed25519sssh-rsasssh-dsssecdsa-sha2-nistp256secdsa-sha2-nistp384secdsa-sha2-nistp521c
sPt�f
d
d�t
D�
�
r
dSt���
}
|
r&|
�d�
}t|tt�
d�kr&dSdS)Nc
3s�|]}
|
�vV
qdSrr)r�string_valuerbrrr\�s�zis_ssh_key.<locals>.<genexpr>T�
F)�any�_SSH_KEY_FORMATS�_SSH_PUBKEY_RC�match�group�_CERT_SUFFIXr
)r]�ssh_pubkey_match�key_typerrbr�
is_ssh_key�s









rn)
r
)rrYr&�cryptography.utilsrrr	�ImportError�ecdsa.ecdsarrrr)r5r9r-rArG�_PEMS�compilerr`r%r_rcrkrhrgrnrrrr�<module>
s6



�

	


�