o

��h��@s�dd
lZdd
l
Z
z
ddlmZmZ
Wney#


ddlmZmZ
Yn
wddlmZ
ddl	m
Z

ddlmZ
ddl
mZmZ
ddlmZmZ
d
ejfd	d
�
Zd#dd
�
Zdd�Zdd�Zdd�Zd$dd�
Zdd�Zdd�Zdd�Zdd�Zdd�Zd%d!d"�
Zd
S)&�N)�Iterable�Mapping)rr)
�jwk)
�Key)
�
ALGORITHMS)�JWSError�JWSSignatureError)�base64url_decode�base64url_encodecCs<|tj
v
rtd
|�
�
t||d�}t|�
}t||||
�}|S)awSigns a claims set and returns a JWS string.

    Args:
        payload (str or dict): A string to sign
        key (str or dict): The key to use for signing the claim set. Can be
            individual JWK or JWK set.
        headers (dict, optional): A set of headers that will be added to
            the default headers.  Any headers that are added as additional
            headers will override the default headers.
        algorithm (str, optional): The algorithm to use for signing the
            the claims.  Defaults to HS256.

    Returns:
        str: The string representation of the header, claims, and signature.

    Raises:
        JWSError: If there is an error signing the token.

    Examples:

        >>> jws.sign({'a': 'b'}, 'secret', algorithm='HS256')
        'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8'

    zAlgorithm %s not supported.)
�additional_headers)r�	SUPPORTEDr�_encode_header�_encode_payload�_sign_header_and_claims)�payload�key�headers�	algorithm�encoded_header�encoded_payload�
signed_output�r�>/usr/local/CyberPanel/lib/python3.10/site-packages/jose/jws.py�signs



rTcCs(t|�
\}}}}|rt
||||
|�
|S)
a�Verifies a JWS string's signature.

    Args:
        token (str): A signed JWS to be verified.
        key (str or dict): A key to attempt to verify the payload with. Can be
            individual JWK or JWK set.
        algorithms (str or list): Valid algorithms that should be used to verify the JWS.

    Returns:
        str: The str representation of the payload, assuming the signature is valid.

    Raises:
        JWSError: If there is an exception verifying a token.

    Examples:

        >>> token = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhIjoiYiJ9.jiMyrsmD8AoHWeQgmxZ5yq8z0lXS67_QGs52AzC8Ru8'
        >>> jws.verify(token, 'secret', algorithms='HS256')

    )�_load�_verify_signature)�tokenr�
algorithms�verify�headerr�
signing_input�	signaturerrrr4s
rc
Cst|�
\}
}}}|
S)
a!
Returns the decoded headers without verification of any kind.

    Args:
        token (str): A signed JWS to decode the headers from.

    Returns:
        dict: The dict representation of the token headers.

    Raises:
        JWSError: If there is an exception decoding the token.
    �
r�rr�claimsr r!rrr�get_unverified_headerR�
r%c

Cst|�
S)
a{
Returns the decoded headers without verification of any kind.

    This is simply a wrapper of get_unverified_header() for backwards
    compatibility.

    Args:
        token (str): A signed JWS to decode the headers from.

    Returns:
        dict: The dict representation of the token headers.

    Raises:
        JWSError: If there is an exception decoding the token.
    )
r%)
rrrr�get_unverified_headersbsr'c
Cst|�
\}
}}}|S)
a
Returns the decoded claims without verification of any kind.

    Args:
        token (str): A signed JWS to decode the headers from.

    Returns:
        str: The str representation of the token claims.

    Raises:
        JWSError: If there is an exception decoding the token.
    r"r#rrr�get_unverified_claimstr&r(cCs6d
|d�}|
r|�|
�

t
j|ddd��d�
}t|�
S)N�JWT)�typ�alg��
,�
:T)�
separators�	sort_keys�utf-8)�update�json�dumps�encoder
)rrr�json_headerrrrr
�s






��r
c

CsJt|t
�r!ztj|d
d��d�
}Wt|�
Sty 


Yt|�
Swt|�
S)Nr,)
r/r1)�
isinstancerr3r4r5�
ValueErrorr
)
rrrrr�s





���
�rc	
Csvd
�||
g�
}zt
|t�st�||�}|�|�
}Wnty)
}
zt|�
�
d}~w
wt|�
}d
�||
|g�
}|�	d�
S)N�
.r1)
�joinr7rr�	constructr�	Exceptionrr
�decode)	r�encoded_claimsrrr r!�
e�encoded_signature�encoded_stringrrrr�s







��
rc


Cs
t|t
�r
|�d
�
}z|�dd�\}
}|
�dd�\}}t|�
}Wnty+


td�
�
tt	j
fy8


td�
�
wz
t�|�
d
�
�
}WntyU
}
ztd|�
�
d}~w
wt|t�s_td�
�
zt|�
}Wntt	j
fys


td�
�
wzt|�
}	Wntt	j
fy�


td	�
�
w|||
|	fS)
Nr1r9�
zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r7�strr5�rsplit�splitr	r8r�	TypeError�binascii�Errorr3�loadsr=r)
�jwtr �crypto_segment�header_segment�claims_segment�header_datarr?rr!rrrr�s<











�


��




�


�rc	CsN|D]"}t|t
�st�||�}z|�|
|�rW
d
SWqty$


YqwdS)NTF)r7rrr;rr<)�keysr r!r+rrrr�_sig_matches_keys�s






�
�rPc
Cs�t|t
�r|f
Sz
tj|ttd
�}Wn	ty


Yn
wt|t�r;d|vr)|dSd|vr0|f
S|��}
|
r8|
S|f
St|t�rLt|t�sLt|t	�sL|S|f
S)N)�	parse_int�parse_floatrO�kty)
r7rr3rIrCr<r�valuesr�bytes)rrTrrr�	_get_keys�s&





�






rV�cCs�|
�d
�
}|st
d�
�
|du
r||v
rt
d�
�
t|�
}z
t||||�s&t��
WdSty3


t
d�
�
t
y?


t
d|�
�
w)Nr+z-No algorithm was specified in the JWS header.z&The specified alg value is not allowedzSignature verification failed.z$Invalid or unsupported algorithm: %s)�getrrVrPr)r rr!rrr+rOrrrr�s







�


�r)
T)
N)rWN) rGr3�collections.abcrr�ImportError�collections�joser�jose.backends.baser�jose.constantsr�jose.exceptionsrr�
jose.utilsr	r
�HS256rrr%r'r(r
rrrrPrVrrrrr�<module>
s0



�




$

!