o FhK2@sddlmZddlZddlZddlmZddlmZddlmZm Z m Z ddl m Z m Z mZddlmZdd lmZmZmZmZmZmZmZdd lmZe r\dd lmZmZdd lmZGd ddZeZ e j!Z!e j"Z"e j#Z#dS)) annotationsN)timegm)Iterable)datetime timedeltatimezone) TYPE_CHECKINGAnyList)api_jws) DecodeErrorExpiredSignatureErrorImmatureSignatureErrorInvalidAudienceErrorInvalidIssuedAtErrorInvalidIssuerErrorMissingRequiredClaimError)RemovedInPyjwt3Warning)AllowedPrivateKeysAllowedPublicKeys)PyJWKc@seZdZdKdLddZedMd d Z   dNdOddZ  dPdQddZ        dRdSd1d2ZdTd4d5Z        dRdUd6d7Z   dVdWd8d9Z dXd:d;Z dYd>d?Z dYd@dAZdYdBdCZdDdEdZdGdHZd[dIdJZdS)\PyJWTNoptionsdict[str, Any] | NonereturnNonecCs"|duri}i|||_dSN)_get_default_optionsr)selfrr D/var/www/html/loop/nvenv/lib/python3.10/site-packages/jwt/api_jwt.py__init__szPyJWT.__init__dict[str, bool | list[str]]cCsddddddgdS)NT)verify_signature verify_exp verify_nbf verify_iat verify_aud verify_issrequirer r r r r!r!szPyJWT._get_default_optionsHS256Tpayloaddict[str, Any]key AllowedPrivateKeys | str | bytes algorithm str | Noneheaders json_encodertype[json.JSONEncoder] | None sort_headersboolstrc Csnt|ts td|}dD]}t||tr#t||||<q|j|||d}t j ||||||dS)NzGExpecting a dict object, as JWT only supports JSON objects as payloads.)expiatnbf)r2r3)r5) isinstancedict TypeErrorcopygetrr utctimetuple_encode_payloadr encode) rr,r.r0r2r3r5 time_claim json_payloadr r r!rB-s, z PyJWT.encodebytescCstj|d|ddS)z Encode a given payload to the bytes to be signed. This method is intended to be overridden by subclasses that need to encode the payload in a different way, e.g. compress the payload. ),:) separatorsclszutf-8)jsondumpsrB)rr,r2r3r r r!rASs zPyJWT._encode_payloadrjwt str | bytes'AllowedPublicKeys | PyJWK | str | bytes algorithmslist[str] | Noneverify bool | Nonedetached_payload bytes | Noneaudiencestr | Iterable[str] | Noneissuerstr | List[str] | Noneleewayfloat | timedeltakwargsr c Ks| rtdt| tt|pi}|dd|dur,||dkr,tjdtd|dsN|dd|dd|d d|d d|d d|drX|sXtd t j |||||d } | | } i|j |} |j | | ||| d| | d<| S)Nzypassing additional kwargs to decode_complete() is deprecated and will be removed in pyjwt version 3. Unsupported kwargs: r$TzThe `verify` argument to `decode` does nothing in PyJWT 2.0 and newer. The equivalent is setting `verify_signature` to False in the `options` dictionary. This invocation has a mismatch between the kwarg and the option entry.)categoryr%Fr&r'r(r)z\It is required that you pass in a value for the "algorithms" argument when calling decode().)r.rPrrT)rVrXrZr,)warningswarntuplekeysrr< setdefaultDeprecationWarningr r decode_complete_decode_payloadr_validate_claims)rrMr.rPrrRrTrVrXrZr\decodedr,merged_optionsr r r!rdesL           zPyJWT.decode_completergc CsPz t|d}Wnty}ztd|d}~wwt|ts&td|S)a Decode the payload from a JWS dictionary (payload, signature, header). This method is intended to be overridden by subclasses that need to decode the payload in a different way, e.g. decompress compressed payloads. r,zInvalid payload string: Nz-Invalid payload string: must be a json object)rJloads ValueErrorr r;r<)rrgr,er r r!res zPyJWT._decode_payloadc KsB| rtdt| t|j||||||||| d } | dS)Nzppassing additional kwargs to decode() is deprecated and will be removed in pyjwt version 3. Unsupported kwargs: )rRrTrVrXrZr,)r^r_r`rarrd) rrMr.rPrrRrTrVrXrZr\rgr r r!decodes&  z PyJWT.decodecCst|tr |}|durt|ttfstd|||tjt j d }d|vr6|dr6| |||d|vrE|drE| |||d|vrT|drT|||||d r^||||d rp|j|||d d d dSdS)Nz+audience must be a string, iterable or None)tzr9r'r:r&r8r%r)r( strict_audFstrict)r;r total_secondsr7rr=_validate_required_claimsrnowrutc timestamp _validate_iat _validate_nbf _validate_exp _validate_iss _validate_audr?)rr,rrVrXrZrsr r r!rfs&    zPyJWT._validate_claimscCs(|dD] }||durt|qdS)Nr*)r?r)rr,rclaimr r r!rrs zPyJWT._validate_required_claimsrsfloatcC@zt|d}Wn tytdw|||krtddS)Nr9z)Issued At claim (iat) must be an integer.z The token is not yet valid (iat))intrjrr)rr,rsrZr9r r r!rv s  zPyJWT._validate_iatcCr})Nr:z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))r~rjr r)rr,rsrZr:r r r!rw  zPyJWT._validate_nbfcCs@zt|d}Wn tytdw|||krtddS)Nr8z/Expiration Time claim (exp) must be an integer.zSignature has expired)r~rjr r)rr,rsrZr8r r r!rx'rzPyJWT._validate_expFrorpcs|durd|vs |dsdStdd|vs|dstd|d|r@t|ts-tdtts6td|kr>tddSttrHgttsQtdtddDr^tdt|trf|g}tfd d|Drutd dS) NaudzInvalid audiencezInvalid audience (strict)z&Invalid claim format in token (strict)zAudience doesn't match (strict)zInvalid claim format in tokencss|] }t|t VqdSr)r;r7).0cr r r! ^sz&PyJWT._validate_aud..c3s|]}|vVqdSrr )rraudience_claimsr r!rdszAudience doesn't match)rrr;r7listanyall)rr,rVrpr rr!rz5s4     zPyJWT._validate_audcCsV|durdSd|vrtdt|tr|d|vrtddS|d|kr)tddS)NisszInvalid issuer)rr;rr)rr,rXr r r!rygs   zPyJWT._validate_issr)rrrr)rr#)r+NNT)r,r-r.r/r0r1r2rr3r4r5r6rr7)NN)r,r-r2rr3r4rrE)rLNNNNNNr)rMrNr.rOrPrQrrrRrSrTrUrVrWrXrYrZr[r\r rr-)rgr-rr )rMrNr.rOrPrQrrrRrSrTrUrVrWrXrYrZr[r\r rr )NNr)r,r-rr-rZr[rr)r,r-rr-rr)r,r-rsr|rZr|rr)r,r-rVrWrpr6rr)r,r-rXr rr)__name__ __module__ __qualname__r" staticmethodrrBrArdrerlrfrrrvrwrxrzryr r r r!rsT   )  E * # 2r)$ __future__rrJr^calendarrcollections.abcrrrrtypingrr r rLr exceptionsr rrrrrrrrPrrapi_jwkrr_jwt_global_objrBrdrlr r r r!s(    $  ]