File: //lib/python3.6/site-packages/jwcrypto/__pycache__/jwt.cpython-36.opt-1.pyc
3
�-3[�? � @ s� d dl Z d dlZd dlmZ d dlmZmZmZ d dlm Z d dl
m Z m Z d dl
mZ ddd d
d d d
d�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd � d e�ZG d d � d e�ZdS ) � N)� string_types)� JWException� json_decode� json_encode)�JWE)�JWK�JWKSet)�JWSZIssuerZSubjectZAudiencezExpiration Timez
Not Beforez Issued AtzJWT ID)�iss�sub�aud�exp�nbf�iat�jtic s" e Zd ZdZd� fdd� Z� ZS )�
JWTExpiredzmJson Web Token is expired.
This exception is raised when a token is expired accoring to its claims.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )Nz
Token expiredz {%s})�str�superr �__init__)�self�message� exception�msg)� __class__� �/usr/lib/python3.6/jwt.pyr s
zJWTExpired.__init__)NN)�__name__�
__module__� __qualname__�__doc__r �
__classcell__r r )r r r s r c s" e Zd ZdZd� fdd� Z� ZS )�JWTNotYetValidz~Json Web Token is not yet valid.
This exception is raised when a token is not valid yet according to its
claims.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )NzToken not yet validz {%s})r r r! r )r r r r )r r r r 1 s
zJWTNotYetValid.__init__)NN)r r r r r r r r )r r r! * s r! c s" e Zd ZdZd� fdd� Z� ZS )�JWTMissingClaimzsJson Web Token claim is invalid.
This exception is raised when a claim does not match the expected value.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )NzInvalid Claim Valuez {%s})r r r" r )r r r r )r r r r B s
zJWTMissingClaim.__init__)NN)r r r r r r r r )r r r" < s r" c s" e Zd ZdZd� fdd� Z� ZS )�JWTInvalidClaimValuezsJson Web Token claim is invalid.
This exception is raised when a claim does not match the expected value.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )NzInvalid Claim Valuez {%s})r r r# r )r r r r )r r r r S s
z JWTInvalidClaimValue.__init__)NN)r r r r r r r r )r r r# M s r# c s" e Zd ZdZd� fdd� Z� ZS )�JWTInvalidClaimFormatzqJson Web Token claim format is invalid.
This exception is raised when a claim is not in a valid format.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )NzInvalid Claim Formatz {%s})r r r$ r )r r r r )r r r r d s
z JWTInvalidClaimFormat.__init__)NN)r r r r r r r r )r r r$ ^ s r$ c s" e Zd ZdZd� fdd� Z� ZS )�JWTMissingKeyIDz�Json Web Token is missing key id.
This exception is raised when trying to decode a JWT with a key set
that does not have a kid value in its header.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )NzMissing Key IDz {%s})r r r% r )r r r r )r r r r v s
zJWTMissingKeyID.__init__)NN)r r r r r r r r )r r r% o s r% c s" e Zd ZdZd� fdd� Z� ZS )�
JWTMissingKeyz�Json Web Token is using a key not in the key set.
This exception is raised if the key that was used is not available
in the passed key set.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )Nz Missing Keyz {%s})r r r& r )r r r r )r r r r � s
zJWTMissingKey.__init__)NN)r r r r r r r r )r r r& � s r& c @ s e Zd ZdZd3dd�Zedd� �Zejdd� �Zedd � �Zejd
d � �Zed d � �Z e jd
d � �Z edd� �Z
e
jdd� �Z
edd� �Z e jdd� �Z dd� Z dd� Z
dd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd4d.d/�Zd5d1d2�ZdS )6�JWTzFJSON Web token object
This object represent a generic token.
Nc C sx d| _ d| _d| _|| _d| _d| _d| _d| _|r:|| _|dk rH|| _|dk rV|| _|r`|| _ |dk rt| j
||� dS )aN Creates a JWT object.
:param header: A dict or a JSON string with the JWT Header data.
:param claims: A dict or a string with the JWT Claims data.
:param jwt: a 'raw' JWT token
:param key: A (:class:`jwcrypto.jwk.JWK`) key to deserialize
the token. A (:class:`jwcrypto.jwk.JWKSet`) can also be used.
:param algs: An optional list of allowed algorithms
:param default_claims: An optional dict with default values for
registred claims. A None value for NumericDate type claims
will cause generation according to system time. Only the values
from RFC 7519 - 4.1 are evaluated.
:param check_claims: An optional dict of claims that must be
present in the token, if the value is not None the claim must
match exactly.
Note: either the header,claims or jwt,key parameters should be
provided as a deserialization operation (which occurs if the jwt
is provided will wipe any header os claim provided by setting
those obtained from the deserialization of the jwt token.
Note: if check_claims is not provided the 'exp' and 'nbf' claims
are checked if they are set on the token but not enforced if not
set. Any other RFC 7519 registered claims are checked only for
format conformance.
N�< iX ) �_header�_claims�_token�_algs� _reg_claims�
_check_claims�_leeway� _validity�header�claims� deserialize)r r1 r2 �jwt�keyZalgsZdefault_claimsZ check_claimsr r r r � s$ z JWT.__init__c C s | j d krtd��| j S )Nz'header' not set)r) �KeyError)r r r r r1 � s
z
JWT.headerc C s t |t�rt|�| _n|| _d S )N)�
isinstance�dictr r) )r �hr r r r1 � s
c C s | j d krtd��| j S )Nz'claims' not set)r* r6 )r r r r r2 � s
z
JWT.claimsc C sD | j rt|t� rt|�}t|t�r:| j|� t|�| _n|| _d S )N)r- r7 r8 r �_add_default_claimsr r* )r �cr r r r2 � s
c C s | j S )N)r+ )r r r r �token� s z JWT.tokenc C s2 t |t�s t |t�s t |t�r&|| _ntd��d S )Nz.Invalid token type, must be one of JWS,JWE,JWT)r7 r r r' r+ � TypeError)r �tr r r r< � s c C s | j S )N)r/ )r r r r �leeway� s z
JWT.leewayc C s t |�| _d S )N)�intr/ )r �lr r r r? � s c C s | j S )N)r0 )r r r r �validity s z JWT.validityc C s t |�| _d S )N)r@ r0 )r �vr r r rB s c C s. ||kr d S | j j|d �}|d k r*|||< d S )N)r- �get)r �namer2 �valr r r �_add_optional_claim s
zJWT._add_optional_claimc C s@ ||kr d S || j kr<| j | d kr.|||< n| j | ||< d S )N)r- )r rE r2 Zdefvalr r r �_add_time_claim s
zJWT._add_time_claimc C s& d|ksd| j krd S tj� |d< d S )Nr )r- �uuidZuuid4)r r2 r r r �_add_jti_claim s zJWT._add_jti_claimc C s| | j d krd S ttj� �}| jd|� | jd|� | jd|� | jd||| j � | jd||� | jd||� | j|� d S )Nr
r r r
r r )r- r@ �timerG rH rB rJ )r r2 Znowr r r r: s
zJWT._add_default_claimsc C s& ||kr d S t || t�s"td��d S )Nz"Claim %s is not a StringOrURI type)r7 r r$ )r rE r2 r r r �_check_string_claim* s zJWT._check_string_claimc C s\ ||kr d S t || t�r<tdd� |D ��rXtd|f ��n t || t�sXtd|f ��d S )Nc s s | ]}t |t� V qd S )N)r7 r )�.0�claimr r r � <genexpr>4 s z3JWT._check_array_or_string_claim.<locals>.<genexpr>z'Claim %s contains non StringOrURI typesz"Claim %s is not a StringOrURI type)r7 �list�anyr$ r )r rE r2 r r r � _check_array_or_string_claim0 s z JWT._check_array_or_string_claimc C sD ||kr d S yt || � W n" tk
r> td|f ��Y nX d S )NzClaim %s is not an integer)r@ �
ValueErrorr$ )r rE r2 r r r �_check_integer_claim; s zJWT._check_integer_claimc C s" ||| k r t d|||f ��d S )Nz#Expired at %d, time: %d(leeway: %d))r )r rN �limitr? r r r �
_check_expD s zJWT._check_expc C s" ||| kr t d|||f ��d S )Nz#Valid from %d, time: %d(leeway: %d))r! )r rN rU r? r r r �
_check_nbfI s zJWT._check_nbfc C s� | j d|� | j d|� | jd|� | jd|� | jd|� | jd|� | j d|� | jd kr�d|kr~| j|d tj� | j� d|kr�| j|d tj� | j� d S )Nr
r r r
r r r )rL rR rT r. rV rK r/ rW )r r2 r r r �_check_default_claimsN s
zJWT._check_default_claimsc C s� | j dkrd S y t| j�}t|t�s*t� �W n& tk
rR | j d k rNtd��d S X | j|� | j d krld S �xj| j j� D �]Z\}}||kr�t d|f ��|d
kr�|d k r�||| kr�t
d|||| f ��qz|dk�r(|d k �r�||| kr�qzt|| t ��r||| k�rqzt
d ||| |f ��qz|d
k�rj|d k �rP| j || |d � n| j || t
j
� | j� qz|d k�r�|d k �r�| j|| |d � n| j|| t
j
� | j� qz|d k rz||| krzt
d|||| f ��qzW d S )NFz4Claims check requested but claims is not a json dictzClaim %s is missingr
r r z*Invalid '%s' value. Expected '%s' got '%s'r z/Invalid '%s' value. Expected '%s' to be in '%s'r
r r )r
r r )r. r r2 r7 r8 rS r$ rX �itemsr" r# rP rV rK r/ rW )r r2 rE �valuer r r �_check_provided_claims] sX
zJWT._check_provided_claimsc C s$ t | j�}|j|| jd� || _dS )a Signs the payload.
Creates a JWS token with the header as the JWS protected header and
the claims as the payload. See (:class:`jwcrypto.jws.JWS`) for
details on the exceptions that may be reaised.
:param key: A (:class:`jwcrypto.jwk.JWK`) key.
)Z protectedN)r r2 Z
add_signaturer1 r< )r r5 r> r r r �make_signed_token� s
zJWT.make_signed_tokenc C s" t | j| j�}|j|� || _dS )a# Encrypts the payload.
Creates a JWE token with the header as the JWE protected header and
the claims as the plaintext. See (:class:`jwcrypto.jwe.JWE`) for
details on the exceptions that may be reaised.
:param key: A (:class:`jwcrypto.jwk.JWK`) key.
N)r r2 r1 Z
add_recipientr< )r r5 r> r r r �make_encrypted_token� s
zJWT.make_encrypted_tokenc C sH |j d�}|dkr t� | _n|dkr.t� | _ntd��| jrF| j| j_|dkr^| jj|d� n�t|t �rx| jj||� n�t|t
��r| jj|d� d| jj kr�t d��|j
| jj d �}|s�td| jj d ��t| jt�r�| jj|� n$t| jt��r| jj|� ntd ��ntd
��|dk �rD| jj | _| jjjd �| _| j� dS ) aa Deserialize a JWT token.
NOTE: Destroys any current status and tries to import the raw
token provided.
:param jwt: a 'raw' JWT token.
:param key: A (:class:`jwcrypto.jwk.JWK`) verification or
decryption key, or a (:class:`jwcrypto.jwk.JWKSet`) that
contains a key indexed by the 'kid' header.
�.� � zToken format unrecognizedNZkidzNo key ID in JWT headerzKey ID %s not in key setzUnknown Token TypezUnrecognized Key Typezutf-8)�countr r< r rS r, Z allowed_algsr3 r7 r r Z jose_headerr% Zget_keyr& ZdecryptZverify� RuntimeErrorr1 Zpayload�decoder2 r[ )r r4 r5 r; Z token_keyr r r r3 � s<
zJWT.deserializeTc C s | j j|�S )a� Serializes the object into a JWS token.
:param compact(boolean): must be True.
Note: the compact parameter is provided for general compatibility
with the serialize() functions of :class:`jwcrypto.jws.JWS` and
:class:`jwcrypto.jwe.JWE` so that these objects can all be used
interchangeably. However the only valid JWT representtion is the
compact representation.
)r< � serialize)r Zcompactr r r rd � s z
JWT.serialize)NNNNNNN)N)T)r r r r r �propertyr1 �setterr2 r< r? rB rG rH rJ r: rL rR rT rV rW rX r[ r\ r] r3 rd r r r r r' � s8
4
;
5r' )rK rI Zsixr Zjwcrypto.commonr r r Z jwcrypto.jwer Z jwcrypto.jwkr r Z jwcrypto.jwsr ZJWTClaimsRegistryr r! r" r# r$ r% r& �objectr' r r r r �<module> s*