File: //usr/local/CyberPanel/lib64/python3.10/site-packages/jwt/__pycache__/algorithms.cpython-310.pyc
o
��h�v � @ sp d dl mZ d dlZd dlZd dlZd dlmZmZ d dlm Z m
Z
m Z m Z m
Z
mZmZ ddlmZ ddlmZmZ ddlmZmZmZmZmZmZm Z m Z m Z zld d l m Z m!Z! d d
l"m#Z# d d l$m%Z% d d l&m'Z' d d
l(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2 d dl3m4Z4m5Z5 d dl6m7Z7m8Z8 d dl9m:Z:m;Z;m<Z<m=Z=m>Z>m?Z?m@Z@mAZA d dlBmCZCmDZDmEZEmFZFmGZGmHZHmIZI dZJW n eKy� dZJY nw e r�e:e<B ZLe/e1B ZMe7e8B e4B e5B ZNeLeMB eNB ZOe:e/B e7B e4B ZPe<e1B e8B e5B ZQh d�ZRd'dd�ZSG dd� de�ZTG dd � d eT�ZUG d d � d eT�ZVeJ�r6G d d � d eT�ZWG d!d"� d"eT�ZXG d#d$� d$eW�ZYG d%d&� d&eT�ZZdS dS )(� )� annotationsN)�ABC�abstractmethod)�
TYPE_CHECKING�Any�ClassVar�Literal�NoReturn�cast�overload� ��InvalidKeyError)� HashlibHash�JWKDict) �base64url_decode�base64url_encode�der_to_raw_signature� force_bytes�from_base64url_uint�
is_pem_format�
is_ssh_key�raw_to_der_signature�to_base64url_uint)�InvalidSignature�UnsupportedAlgorithm)�default_backend)�hashes)�padding)
�ECDSA� SECP256K1� SECP256R1� SECP384R1� SECP521R1�
EllipticCurve�EllipticCurvePrivateKey�EllipticCurvePrivateNumbers�EllipticCurvePublicKey�EllipticCurvePublicNumbers)�Ed448PrivateKey�Ed448PublicKey)�Ed25519PrivateKey�Ed25519PublicKey)�
RSAPrivateKey�RSAPrivateNumbers� RSAPublicKey�RSAPublicNumbers� rsa_crt_dmp1� rsa_crt_dmq1� rsa_crt_iqmp�rsa_recover_prime_factors)�Encoding� NoEncryption�
PrivateFormat� PublicFormat�load_pem_private_key�load_pem_public_key�load_ssh_public_keyTF> �ES256�ES384�ES512�ES521�EdDSA�PS256�PS384�PS512�RS256�RS384�RS512�ES256K�return�dict[str, Algorithm]c C s� t � ttj�ttj�ttj�d�} trG| �ttj�ttj�ttj�ttj�ttj�ttj�ttj�ttj�t t j�t t j�t t j�t
� d� � | S )zE
Returns the algorithms that are implemented by the library.
)�none�HS256�HS384�HS512) rD rE rF r< rG r= r? r> rA rB rC r@ ) �
NoneAlgorithm�
HMACAlgorithm�SHA256�SHA384�SHA512�
has_crypto�update� RSAAlgorithm� ECAlgorithm�RSAPSSAlgorithm� OKPAlgorithm)�default_algorithms� rZ �D/usr/local/CyberPanel/lib/python3.10/site-packages/jwt/algorithms.py�get_default_algorithmsi s0 ����r\ c @ s� e Zd ZdZd"dd�Zed#d d
��Zed$d d
��Zed%dd��Ze e
ed&dd����Z e e
ed'd(dd����Z e
ed'd)d d���Z e
ed*d d ���Z d!S )+� AlgorithmzH
The interface for an algorithm used to sign and verify tokens.
�bytestr�bytesrH c C sj t | dd�}|du r t�tr-t|t�r-t|tj�r-tj|� t � d�}|�
|� t |� � �S t ||��
� �S )z�
Compute a hash digest using the specified algorithm's hash algorithm.
If there is no hash algorithm, raises a NotImplementedError.
�hash_algN)�backend)�getattr�NotImplementedErrorrS �
isinstance�type�
issubclassr �
HashAlgorithm�Hashr rT r_ �finalize�digest)�selfr^ r` rj rZ rZ r[ �compute_hash_digest� s ��
�
z Algorithm.compute_hash_digest�keyr c C � dS )z�
Performs necessary validation and conversions on the key and returns
the key value in the proper format for sign() and verify().
NrZ �rk rm rZ rZ r[ � prepare_key� � zAlgorithm.prepare_key�msgc C rn )zn
Returns a digital signature for the specified message
using the specified key value.
NrZ �rk rr rm rZ rZ r[ �sign� rq zAlgorithm.sign�sig�boolc C rn )zz
Verifies that the specified digital signature is valid
for the specified message and key values.
NrZ �rk rr rm ru rZ rZ r[ �verify� rq zAlgorithm.verify�as_dict�
Literal[True]r c C � d S �NrZ ��key_objry rZ rZ r[ �to_jwk� � zAlgorithm.to_jwkF�Literal[False]�strc C r{ r| rZ r} rZ rZ r[ r � r� �
JWKDict | strc C rn )z3
Serializes a given key into a JWK
NrZ r} rZ rZ r[ r � rq �jwk�
str | JWKDictc C rn )zJ
Deserializes a given key from JWK back into a key object
NrZ �r� rZ rZ r[ �from_jwk� rq zAlgorithm.from_jwkN)r^ r_ rH r_ )rm r rH r )rr r_ rm r rH r_ )rr r_ rm r ru r_ rH rv )ry rz rH r �F)ry r� rH r� )ry rv rH r� )r� r� rH r )
�__name__�
__module__� __qualname__�__doc__rl r rp rt rx r � staticmethodr r� rZ rZ rZ r[ r] � s.
r] c @ sL e Zd ZdZd dd�Zd d
d �Zd dd�Zed d dd��Zed!dd��Z dS )"rN zZ
Placeholder for use when no signing or verification
operations are required.
rm �
str | NonerH �Nonec C s |dkrd }|d urt d��|S )N� z*When alg = "none", key value must be None.r
ro rZ rZ r[ rp � s
zNoneAlgorithm.prepare_keyrr r_ c C rn )N� rZ rs rZ rZ r[ rt � � zNoneAlgorithm.signru rv c C rn )NFrZ rw rZ rZ r[ rx � r� zNoneAlgorithm.verifyFr~ r ry r c C � t � �r| �rc r} rZ rZ r[ r � � zNoneAlgorithm.to_jwkr� r� c C r� r| r� r� rZ rZ r[ r� � r� zNoneAlgorithm.from_jwkN)rm r� rH r� )rr r_ rm r� rH r_ )rr r_ rm r� ru r_ rH rv r� )r~ r ry rv rH r )r� r� rH r )
r� r� r� r� rp rt rx r� r r� rZ rZ rZ r[ rN � s
rN c @ s� e Zd ZU dZejZded< ejZ ded< ej
Z ded< d)d
d �Z d*dd�Z
eed+dd���Zee d,d-dd���Zed,d.d d��Zed/d d!��Zd0d#d$�Zd1d&d'�Zd(S )2rO zf
Performs signing and verification operations using HMAC
and the specified hash function.
zClassVar[HashlibHash]rP rQ rR r` r rH r� c C �
|| _ d S r| �r` �rk r` rZ rZ r[ �__init__� �
zHMACAlgorithm.__init__rm � str | bytesr_ c C s$ t |�}t|�s t|�rtd��|S )NzdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r r r r �rk rm � key_bytesrZ rZ r[ rp � s �zHMACAlgorithm.prepare_keyr~ ry rz r c C r{ r| rZ r} rZ rZ r[ r
� zHMACAlgorithm.to_jwkFr� r� c C r{ r| rZ r} rZ rZ r[ r r� rv r� c C s( t t| ���� dd�}|r|S t�|�S )N�oct)�k�kty)r r �decode�json�dumps)r~ ry r� rZ rZ r[ r s �
r� r� c C sj zt | t�r t�| �}n
t | t�r| }nt�W n ty# td�d �w |�d�dkr/td��t|d �S )N�Key is not valid JSONr� r� zNot an HMAC keyr� ) rd r� r� �loads�dict�
ValueErrorr �getr )r� �objrZ rZ r[ r� " s
�
� zHMACAlgorithm.from_jwkrr c C s t �||| j��� S r| )�hmac�newr` rj rs rZ rZ r[ rt 3 � zHMACAlgorithm.signru c C s t �|| �||��S r| )r� �compare_digestrt rw rZ rZ r[ rx 6 r� zHMACAlgorithm.verifyN)r` r rH r� )rm r� rH r_ )r~ r� ry rz rH r r� )r~ r� ry r� rH r� )r~ r� ry rv rH r� )r� r� rH r_ )rr r_ rm r_ rH r_ )rr r_ rm r_ ru r_ rH rv )r� r� r� r� �hashlib�sha256rP �__annotations__�sha384rQ �sha512rR r� rp r r� r r� rt rx rZ rZ rZ r[ rO � s(
�
rO c @ s� e Zd ZU dZejZded< ejZded< ejZded< d,d
d �Z d-dd�Z
e e d.dd���Z
e e d/d0dd���Z
e d/d1d d��Z
e d2d d!��Zd3d%d&�Zd4d)d*�Zd+S )5rU z~
Performs signing and verification operations using
RSASSA-PKCS-v1_5 and the specified hash function.
�$ClassVar[type[hashes.HashAlgorithm]]rP rQ rR r` �type[hashes.HashAlgorithm]rH r� c C r� r| r� r� rZ rZ r[ r� F r� zRSAAlgorithm.__init__rm � AllowedRSAKeys | str | bytes�AllowedRSAKeysc C s� t |ttf�r |S t |ttf�std��t|�}z|�d�r&ttt |��W S ttt
|d d��W S t yO z
ttt |��W Y S t t
fyN td�d �w w )N� Expecting a PEM-formatted key.s ssh-rsa��passwordz(Could not parse the provided public key.)rd r- r/ r_ r� � TypeErrorr �
startswithr
r; r9 r� r: r r r� rZ rZ r[ rp I s,
� ����zRSAAlgorithm.prepare_keyr~ ry rz r c C r{ r| rZ r} rZ rZ r[ r a r� zRSAAlgorithm.to_jwkFr� r� c C r{ r| rZ r} rZ rZ r[ r g r� rv r� c C s� d }t | d�rD| �� }ddgt|jj��� t|jj��� t|j��� t|j��� t|j ��� t|j
��� t|j ��� t|j ��� d�
}n t | d�r`| �� }ddgt|j��� t|j��� d�}nt
d��|rh|S t�|�S )N�private_numbers�RSArt )
r� �key_ops�n�e�d�p�q�dp�dq�qirx )r� r� r� r� �Not a public or private key)�hasattrr� r �public_numbersr� r� r� r� r� r� �dmp1�dmq1�iqmpr r� r� )r~ ry r� �numbersrZ rZ r[ r m s2
�
�
r� r� c s� zt | t�r t�| �� n
t | t�r| � nt�W n ty# td�d �w � �d�dkr0td�d �d� v r�d� v r�d� v r�d� v rDtd ��g d
�}� fd d �|D �}t|�}|r`t |�s`td
�d �t
t � d �t � d ��}|r�t t � d �t � d �t � d �t � d �t � d �t � d �|d�}|�� S t � d �}t
|j||j�\}}t |||t||�t||�t||�|d�}|�� S d� v r�d� v r�t
t � d �t � d ���� S td��)Nr� r� r� zNot an RSA keyr� r� r� �othz5Unsupported RSA private key: > 2 primes not supported)r� r� r� r� r� c s g | ]}|� v �qS rZ rZ )�.0�prop�r� rZ r[ �
<listcomp>� s z)RSAAlgorithm.from_jwk.<locals>.<listcomp>z@RSA key must include all parameters if any are present besides dr� r� r� r� r� )r� r� r� r� r� r� r� r� )rd r� r� r� r� r� r r� �any�allr0 r r. r4 r� r� r1 r2 r3 � private_key�
public_key) r� � other_props� props_found�any_props_foundr� r� r� r� r� rZ r� r[ r� � s~
�
�
� ��
�
� �
��
��zRSAAlgorithm.from_jwkrr r_ r- c C s |� |t�� | �� �S r| )rt r �PKCS1v15r` rs rZ rZ r[ rt � s zRSAAlgorithm.signr/ ru c C s4 z|� ||t�� | �� � W dS ty Y dS w )NTF)rx r r� r` r rw rZ rZ r[ rx � s �zRSAAlgorithm.verifyN�r` r� rH r� )rm r� rH r� )r~ r� ry rz rH r r� )r~ r� ry r� rH r� )r~ r� ry rv rH r� )r� r� rH r� �rr r_ rm r- rH r_ �rr r_ rm r/ ru r_ rH rv )r� r� r� r� r rP r� rQ rR r� rp r r� r r� rt rx rZ rZ rZ r[ rU < s(
�&
GrU c @ s� e Zd ZU dZejZded< ejZded< ejZded< d+d
d �Z d,dd�Z
d-dd�Z d.dd�Z e
ed/d d ���Ze
e d0d1d#d ���Zed0d2d%d ��Zed3d(d)��Zd*S )4rV zr
Performs signing and verification operations using
ECDSA and the specified hash function
r� rP rQ rR r` r� rH r� c C r� r| r� r� rZ rZ r[ r� � r� zECAlgorithm.__init__rm �AllowedECKeys | str | bytes�
AllowedECKeysc C s� t |ttf�r |S t |ttf�std��t|�}z|�d�r#t|�}nt |�}W n t
y7 t |d d�}Y nw t |ttf�sDt d�d �|S )Nr� s ecdsa-sha2-r� zcExpecting a EllipticCurvePrivateKey/EllipticCurvePublicKey. Wrong key provided for ECDSA algorithms)
rd r% r' r_ r� r� r r� r; r: r� r9 r )rk rm r� �
crypto_keyrZ rZ r[ rp � s,
� ����zECAlgorithm.prepare_keyrr r_ r% c C s |� |t| �� ��}t||j�S r| )rt r r` r �curve)rk rr rm �der_sigrZ rZ r[ rt s zECAlgorithm.signru rv c C sn zt ||j�}W n
ty Y dS w zt|t�r |�� n|}|�||t| �� �� W dS t y6 Y dS w )NFT)
r r� r� rd r% r� rx r r` r )rk rr rm ru r� r� rZ rZ r[ rx s �
�� �zECAlgorithm.verifyr~ ry rz r c C r{ r| rZ r} rZ rZ r[ r ' r� zECAlgorithm.to_jwkFr� r� c C r{ r| rZ r} rZ rZ r[ r - r� r� c C s� t | t�r | �� �� }nt | t�r| �� }ntd��t | jt�r#d}n#t | jt�r,d}nt | jt �r5d}nt | jt
�r>d}ntd| j� ���d|t |j | jj
d��� t |j| jj
d��� d �}t | t�rst | �� j| jj
d��� |d
< |rw|S t�|�S ) Nr� �P-256�P-384�P-521� secp256k1�Invalid curve: �EC)�
bit_length)r� �crv�x�yr� )rd r% r� r� r' r r� r! r" r# r r r� �key_sizer� r� r� �
private_valuer� r� )r~ ry r� r� r� rZ rZ r[ r 3 sJ
���
��
r� r� c C s zt | t�r t�| �}n
t | t�r| }nt�W n ty# td�d �w |�d�dkr0td�d �d|vs8d|vr=td�d �t|�d��}t|�d��}|�d�}|dkrmt |�t |� krbd krhn nt
� }netd
�d �|d kr�t |�t |� krd kr�n nt � }nHtd
�d �|dkr�t |�t |� kr�dkr�n nt � }n+td�d �|dkr�t |�t |� kr�d kr�n td��t
� }n td��td|� ���ttj|dd�tj|dd�|d�}d|vr�|�� S t|�d��}t |�t |�kr�tdt |�|��ttj|dd�|��� S )Nr� r� r� zNot an Elliptic curve keyr� r� r� r� � z)Coords should be 32 bytes for curve P-256r� �0 z)Coords should be 48 bytes for curve P-384r� �B z)Coords should be 66 bytes for curve P-521r� z-Coords should be 32 bytes for curve secp256k1r� �big)� byteorder)r� r� r� r� z!D should be {} bytes for curve {})rd r� r� r� r� r� r r� r �lenr! r" r# r r( �int�
from_bytesr� r& r� )r� r� r� r� r� � curve_objr� r� rZ rZ r[ r� _ s�
�
�
�� �� �� ��� �
���zECAlgorithm.from_jwkNr� )rm r� rH r� )rr r_ rm r% rH r_ )rr r_ rm r� ru r_ rH rv )r~ r� ry rz rH r r� )r~ r� ry r� rH r� )r~ r� ry rv rH r� )r� r� rH r� )r� r� r� r� r rP r� rQ rR r� rp rt rx r r� r r� rZ rZ rZ r[ rV � s(
�+rV c @ s$ e Zd ZdZddd�Zdd d
�ZdS )rW zA
Performs a signature using RSASSA-PSS with MGF1
rr r_ rm r- rH c C s, |� |tjt�| �� �| �� jd�| �� �S )N��mgf� salt_length)rt r �PSS�MGF1r` � digest_sizers rZ rZ r[ rt � s ��zRSAPSSAlgorithm.signr/ ru rv c C sJ z|� ||tjt�| �� �| �� jd�| �� � W dS ty$ Y dS w )Nr� TF)rx r r� r� r` r� r rw rZ rZ r[ rx � s �� �zRSAPSSAlgorithm.verifyNr� r� )r� r� r� r� rt rx rZ rZ rZ r[ rW � s
rW c @ s~ e Zd ZdZd'dd�Zd(d d �Zd)dd�Zd*dd�Zee d+dd���Z
ee d,d-d d���Z
e d,d.d!d��Z
e d/d$d%��Z d&S )0rX z�
Performs signing and verification operations using EdDSA
This class requires ``cryptography>=2.6`` to be installed.
�kwargsr rH r� c K r{ r| rZ )rk r� rZ rZ r[ r� � r� zOKPAlgorithm.__init__rm � AllowedOKPKeys | str | bytes�AllowedOKPKeysc C s� t |ttf�r?t |t�r|�d�n|}t |t�r |�d�n|}d|v r(t|�}nd|v r3t|d d�}n |dd� dkr?t|�}t |tt t
t f�sLt d��|S ) N�utf-8z-----BEGIN PUBLICz-----BEGIN PRIVATEr� r � zssh-zcExpecting a EllipticCurvePrivateKey/EllipticCurvePublicKey. Wrong key provided for EdDSA algorithms)
rd r_ r� r� �encoder: r9 r; r+ r, r) r* r )rk rm �key_strr� rZ rZ r[ rp � s"
��zOKPAlgorithm.prepare_keyrr r� �#Ed25519PrivateKey | Ed448PrivateKeyr_ c C s" t |t�r
|�d�n|}|�|�S )aS
Sign a message ``msg`` using the EdDSA private key ``key``
:param str|bytes msg: Message to sign
:param Ed25519PrivateKey}Ed448PrivateKey key: A :class:`.Ed25519PrivateKey`
or :class:`.Ed448PrivateKey` isinstance
:return bytes signature: The signature, as bytes
r )rd r� r rt )rk rr rm � msg_bytesrZ rZ r[ rt � s
zOKPAlgorithm.signru rv c C sr z.t |t�r |�d�n|}t |t�r|�d�n|}t |ttf�r$|�� n|}|�||� W dS ty8 Y dS w )a�
Verify a given ``msg`` against a signature ``sig`` using the EdDSA key ``key``
:param str|bytes sig: EdDSA signature to check ``msg`` against
:param str|bytes msg: Message to sign
:param Ed25519PrivateKey|Ed25519PublicKey|Ed448PrivateKey|Ed448PublicKey key:
A private or public EdDSA key instance
:return bool verified: True if signature is valid, False if not.
r TF)rd r� r r+ r) r� rx r )rk rr rm ru r � sig_bytesr� rZ rZ r[ rx � s
�� �zOKPAlgorithm.verifyry rz r c C r{ r| rZ �rm ry rZ rZ r[ r r� zOKPAlgorithm.to_jwkFr� r� c C r{ r| rZ r rZ rZ r[ r r� r� c C s� t | ttf�r.| jtjtjd�}t | t�rdnd}tt|��� � d|d�}|r)|S t
� |�S t | t t
f�rp| jtjtjt� d�}| �� jtjtjd�}t | t �rRdnd}tt|��� � tt|��� � d|d�}|rk|S t
� |�S td��) N)�encoding�format�Ed25519�Ed448�OKP)r� r� r� )r
r �encryption_algorithm)r� r� r� r� r� )rd r, r* � public_bytesr5 �Rawr8 r r r� r� r� r+ r) �
private_bytesr7 r6 r� r )rm ry r� r� r� r� rZ rZ r[ r sB ��
���
r� r� c
C s zt | t�r t�| �}n
t | t�r| }nt�W n ty# td�d �w |�d�dkr/td��|�d�}|dkrC|dkrCtd|� ���d |vrKtd
��t|�d ��}z+d |vrg|dkrat �
|�W S t �
|�W S t|�d ��}|dkrxt �
|�W S t�
|�W S ty� } ztd �|�d }~ww )
Nr� r� r zNot an Octet Key Pairr� r r
r� r� z OKP should have "x" parameterr� zInvalid key parameter)rd r� r� r� r� r� r r� r r, �from_public_bytesr* r+ �from_private_bytesr) )r� r� r� r� r� �errrZ rZ r[ r� J s>
�
�
��zOKPAlgorithm.from_jwkN)r� r rH r� )rm r rH r )rr r� rm r rH r_ )rr r� rm r ru r� rH rv )rm r ry rz rH r r� )rm r ry r� rH r� )rm r ry rv rH r� )r� r� rH r ) r� r� r� r� r� rp rt rx r r� r r� rZ rZ rZ r[ rX � s"
�.rX )rH rI )[�
__future__r r� r� r� �abcr r �typingr r r r r r
r �
exceptionsr �typesr r �utilsr r r r r r r r r �cryptography.exceptionsr r � cryptography.hazmat.backendsr � cryptography.hazmat.primitivesr �)cryptography.hazmat.primitives.asymmetricr �,cryptography.hazmat.primitives.asymmetric.ecr r r! r" r# r$ r% r& r' r( �/cryptography.hazmat.primitives.asymmetric.ed448r) r* �1cryptography.hazmat.primitives.asymmetric.ed25519r+ r, �-cryptography.hazmat.primitives.asymmetric.rsar- r. r/ r0 r1 r2 r3 r4 �,cryptography.hazmat.primitives.serializationr5 r6 r7 r8 r9 r: r; rS �ModuleNotFoundErrorr� r� r � AllowedKeys�AllowedPrivateKeys�AllowedPublicKeys�requires_cryptographyr\ r] rN rO rU rV rW rX rZ rZ rZ r[ �<module> sb $ , 0 ($
�� ��
"I H + D � � ��