File: //usr/local/CyberCP/lib64/python3.10/site-packages/jwt/__pycache__/api_jwt.cpython-310.pyc
o
�h�8 � @ s� d dl mZ d dlZd dlZd dlmZ d dlmZmZ d dl m Z m
Z
m Z d dl m
Z
mZ ddlmZ dd lmZmZmZmZmZmZmZmZmZ dd
lmZ e
r`dd l m Z m Z dd l m Z G d
d� d�Z!e!� Z"e"j#Z#e"j$Z$e"j%Z%dS )� )� annotationsN)�timegm)�Iterable�Sequence)�datetime� timedelta�timezone)�
TYPE_CHECKING�Any� )�api_jws) � DecodeError�ExpiredSignatureError�ImmatureSignatureError�InvalidAudienceError�InvalidIssuedAtError�InvalidIssuerError�InvalidJTIError�InvalidSubjectError�MissingRequiredClaimError)�RemovedInPyjwt3Warning)�AllowedPrivateKeys�AllowedPublicKeys)�PyJWKc @ s� e Zd ZdOdPdd�ZedQd d
��Z dRdSdd�Z dTdUdd �Z dVdWd1d2�ZdXd4d5�Z dVdYd6d7�Z
dZd[d8d9�Z d\d:d;�Z dOd]d<d=�Z
d]d>d?�Zd^dBdC�Zd^dDdE�Zd^dFdG�ZdHdI�d_dKdL�Zd`dMdN�ZdS )a�PyJWTN�options�dict[str, Any] | None�return�Nonec C s" |d u ri }i | � � �|�| _d S �N)�_get_default_optionsr )�selfr � r" �>/usr/local/CyberCP/lib/python3.10/site-packages/jwt/api_jwt.py�__init__ s zPyJWT.__init__�dict[str, bool | list[str]]c
C s ddddddddg d� S )NT) �verify_signature�
verify_exp�
verify_nbf�
verify_iat�
verify_aud�
verify_iss�
verify_sub�
verify_jti�requirer" r" r" r" r# r # s �zPyJWT._get_default_optionsT�payload�dict[str, Any]�key�(AllowedPrivateKeys | PyJWK | str | bytes� algorithm�
str | None�headers� json_encoder� type[json.JSONEncoder] | None� sort_headers�bool�strc C sn t |t�s td��|�� }dD ]}t |�|�t�r#t|| �� �||< q| j|||d�}t j
||||||d�S )NzGExpecting a dict object, as JWT only supports JSON objects as payloads.)�exp�iat�nbf)r5 r6 )r8 ) �
isinstance�dict� TypeError�copy�getr r � utctimetuple�_encode_payloadr �encode) r! r/ r1 r3 r5 r6 r8 �
time_claim� json_payloadr" r" r# rE 1 s,
����z PyJWT.encode�bytesc C s t j|d|d��d�S )z�
Encode a given payload to the bytes to be signed.
This method is intended to be overridden by subclasses that need to
encode the payload in a different way, e.g. compress the payload.
)�,�:)�
separators�clszutf-8)�json�dumpsrE )r! r/ r5 r6 r" r" r# rD W s ��zPyJWT._encode_payload� r �jwt� str | bytes�'AllowedPublicKeys | PyJWK | str | bytes�
algorithms�Sequence[str] | None�verify� bool | None�detached_payload� bytes | None�audience�str | Iterable[str] | None�issuer�str | Sequence[str] | None�subject�leeway�float | timedelta�kwargsr
c K s | rt jdt| �� �� �tdd� t|pi �}|�dd� |d ur/||d kr/t jdtdd� |d s]|�dd � |�d
d � |�d d � |�d d � |�d
d � |�dd � |�dd � tj |||||d�} | �
| �}
i | j �|�}| j |
||||
| d� |
| d< | S )Nzypassing additional kwargs to decode_complete() is deprecated and will be removed in pyjwt version 3. Unsupported kwargs: � ��
stacklevelr& Tz�The `verify` argument to `decode` does nothing in PyJWT 2.0 and newer. The equivalent is setting `verify_signature` to False in the `options` dictionary. This invocation has a mismatch between the kwarg and the option entry.)�categoryrc r' Fr( r) r* r+ r, r- )r1 rS r rW )rY r[ r^ r] r/ )
�warnings�warn�tuple�keysr r? �
setdefault�DeprecationWarningr �decode_complete�_decode_payloadr �_validate_claims)r! rP r1 rS r rU rW rY r[ r] r^ r` �decodedr/ �merged_optionsr" r" r# rk i sV
�� � �
� zPyJWT.decode_completern c
C sR z t �|d �}W n ty } ztd|� ��|�d}~ww t|t�s'td��|S )a
Decode the payload from a JWS dictionary (payload, signature, header).
This method is intended to be overridden by subclasses that need to
decode the payload in a different way, e.g. decompress compressed
payloads.
r/ zInvalid payload string: Nz-Invalid payload string: must be a json object)rM �loads�
ValueErrorr
r> r? )r! rn r/ �er" r" r# rl � s ��
zPyJWT._decode_payloadc
K sH | rt jdt| �� �� �tdd� | j||||||||| |
d�
} | d S )Nzppassing additional kwargs to decode() is deprecated and will be removed in pyjwt version 3. Unsupported kwargs: ra rb )rU rW rY r] r[ r^ r/ )re rf rg rh r rk )
r! rP r1 rS r rU rW rY r] r[ r^ r` rn r" r" r# �decode� s*
��� z PyJWT.decodec C s
t |t�r |�� }|d urt |ttf�std��| �||� tjt j
d�� � }d|v r6|d r6| � |||� d|v rE|d rE| �
|||� d|v rT|d rT| �|||� |d r^| �||� |d
rn| j|||�d d �d
� |d rx| �||� |d r�| �|� d S d S )Nz+audience must be a string, iterable or None)�tzr< r) r= r( r; r' r+ r* �
strict_audF��strictr, r- )r> r �
total_secondsr: r r@ �_validate_required_claimsr �nowr �utc� timestamp�
_validate_iat�
_validate_nbf�
_validate_exp�
_validate_iss�
_validate_audrB �
_validate_sub�
_validate_jti)r! r/ r rY r[ r] r^ rz r" r" r# rm � s.
� �zPyJWT._validate_claimsc C s( |d D ]
}|� |�d u rt|��qd S )Nr. )rB r )r! r/ r �claimr" r" r# ry s
��z PyJWT._validate_required_claimsc C sH d|vrdS t |d t�std��|dur |�d�|kr"td��dS dS )z�
Checks whether "sub" if in the payload is valid ot not.
This is an Optional claim
:param payload(dict): The payload which needs to be validated
:param subject(str): The subject of the token
�subNzSubject must be a stringzInvalid subject)r> r: r rB )r! r/ r] r" r" r# r� s �zPyJWT._validate_subc C s( d|vrdS t |�d�t�std��dS )z�
Checks whether "jti" if in the payload is valid ot not
This is an Optional claim
:param payload(dict): The payload which needs to be validated
�jtiNzJWT ID must be a string)r> rB r: r )r! r/ r" r" r# r� 2 s
�zPyJWT._validate_jtirz �floatc C �B zt |d �}W n ty td�d �w ||| kr td��d S )Nr< z)Issued At claim (iat) must be an integer.z The token is not yet valid (iat))�intrq r r )r! r/ rz r^ r< r" r" r# r} @ s ��� �zPyJWT._validate_iatc C r� )Nr= z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))r� rq r
r )r! r/ rz r^ r= r" r" r# r~ O s
� �zPyJWT._validate_nbfc C sB zt |d �}W n ty td�d �w ||| kr td��d S )Nr; z/Expiration Time claim (exp) must be an integer.zSignature has expired)r� rq r
r )r! r/ rz r^ r; r" r" r# r ] s ��� �zPyJWT._validate_expFrv rw c s� |d u rd|vs |d sd S t d��d|vs|d s td��|d � |r@t|t�s-t d��t� t�s6t d��|� kr>t d��d S t� t�rH� g� t� t�sQt d��tdd� � D ��r^t d��t|t�rf|g}t� fd d�|D ��rut d
��d S ) N�audzInvalid audiencezInvalid audience (strict)z&Invalid claim format in token (strict)z Audience doesn't match (strict)z Invalid claim format in tokenc s s � | ] }t |t� V qd S r )r> r: )�.0�cr" r" r# � <genexpr>� s � z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s � | ]}|� vV qd S r r" )r� r� ��audience_claimsr" r# r� � s � zAudience doesn't match)r r r> r: �list�any�all)r! r/ rY rw r" r� r# r� m s4
�zPyJWT._validate_audc C sV |d u rd S d|vrt d��t|t�r |d |kr td��d S |d |vr)td��d S )N�isszInvalid issuer)r r> r: r )r! r/ r[ r" r" r# r� � s
� �zPyJWT._validate_issr )r r r r )r r% )NNNT)r/ r0 r1 r2 r3 r4 r5 r r6 r7 r8 r9 r r: )NN)r/ r0 r5 r r6 r7 r rH ) rO NNNNNNNr )rP rQ r1 rR rS rT r r rU rV rW rX rY rZ r[ r\ r] r4 r^ r_ r` r
r r0 )rn r0 r r
)rP rQ r1 rR rS rT r r rU rV rW rX rY rZ r] r4 r[ r\ r^ r_ r` r
r r
)NNNr )
r/ r0 r r0 r] r4 r^ r_ r r )r/ r0 r r0 r r )r/ r0 r r )r/ r0 rz r� r^ r� r r )r/ r0 rY rZ rw r9 r r )r/ r0 r[ r
r r )�__name__�
__module__� __qualname__r$ � staticmethodr rE rD rk rl rs rm ry r� r� r} r~ r r� r� r" r" r" r# r s^ �) � �
J �- �
*
�2r )&�
__future__r rM re �calendarr �collections.abcr r r r r �typingr r
rO r �
exceptionsr
r r r r r r r r r rS r r �api_jwkr r �_jwt_global_objrE rk rs r" r" r" r# �<module> s* ,