File: //proc/self/root/lib/python3.6/site-packages/jwcrypto/__pycache__/jws.cpython-36.pyc
3
�-3[�J � @ s� d dl mZ d dl mZmZ d dl mZmZ d dlmZ d dlm Z d+d,d-d.d/d0d1d2d3d4d5d� Z
ddddddddd d d d g Z G d d!� d!e�Z G d"d#� d#e�Z
G d$d%� d%e�ZG d&d'� d'e�ZG d(d)� d)e�Zd*S )6� )� JWException)�base64url_decode�base64url_encode)� json_decode� json_encode)�JWA)�JWK� AlgorithmT� JWK Set URLF� JSON Web Key�Key ID� X.509 URL�X.509 Certificate Chain�"X.509 Certificate SHA-1 Thumbprint�$X.509 Certificate SHA-256 Thumbprint�Type� Content Type�Critical) �algZjkuZjwkZkidZx5uZx5cZx5tzx5t#S256�typZcty�critZHS256ZHS384ZHS512ZRS256ZRS384ZRS512ZES256ZES384ZES512ZPS256ZPS384ZPS512c s" e Zd ZdZd� fdd� Z� ZS )�InvalidJWSSignaturez_Invalid JWS Signature.
This exception is raised when a signature cannot be validated.
Nc s> d }|rt |�}nd}|r*|dt |� 7 }tt| �j|� d S )Nz&Unknown Signature Verification Failurez {%s})�str�superr �__init__)�self�message� exception�msg)� __class__� �/usr/lib/python3.6/jws.pyr ( s
z InvalidJWSSignature.__init__)NN)�__name__�
__module__� __qualname__�__doc__r �
__classcell__r r )r r! r " s r c s" e Zd ZdZd� fdd� Z� ZS )�InvalidJWSObjectzvInvalid JWS Object.
This exception is raised when the JWS Object is invalid and/or
improperly formatted.
Nc s< d}|r|d| 7 }|r(|dt |� 7 }tt| �j|� d S )NzInvalid JWS Objectz [%s]z {%s})r r r' r )r r r r )r r r! r : s zInvalidJWSObject.__init__)NN)r" r# r$ r% r r& r r )r r! r' 3 s r' c s" e Zd ZdZd� fdd� Z� ZS )�InvalidJWSOperationz�Invalid JWS Object.
This exception is raised when a requested operation cannot
be execute due to unsatisfied conditions.
Nc s: d }|r|}nd}|r&|dt |� 7 }tt| �j|� d S )NzUnknown Operation Failurez {%s})r r r( r )r r r r )r r r! r J s z InvalidJWSOperation.__init__)NN)r" r# r$ r% r r& r r )r r! r( C s r( c @ s2 e Zd ZdZd dd�Zdd� Zdd� Zd d
� ZdS ) �JWSCorez�The inner JWS Core object.
This object SHOULD NOT be used directly, the JWS object should be
used instead as JWS perform necessary checks on the validity of
the object and requested operations.
Nc C sl || _ | j||�| _t|t�s&td��|| _|dk rXt|t�rFt|�}t |j
d��| _ nd| _ t |�| _ dS )a� Core JWS token handling.
:param alg: The algorithm used to produce the signature.
See RFC 7518
:param key: A (:class:`jwcrypto.jwk.JWK`) key of appropriate
type for the "alg" provided in the 'protected' json string.
:param header: A JSON string representing the protected header.
:param payload(bytes): An arbitrary value
:param algs: An optional list of allowed algorithms
:raises ValueError: if the key is not a :class:`JWK` object
:raises InvalidJWAAlgorithm: if the algorithm is not valid, is
unknown or otherwise not yet implemented.
zkey is not a JWK objectNzutf-8� )
r �_jwa�engine�
isinstancer �
ValueError�key�dictr r �encode� protected�payload)r r r/ �headerr3 �algsr r r! r ^ s
zJWSCore.__init__c C s& |d kr t }||kr td��tj|�S )NzAlgorithm not allowed)�default_allowed_algsr( r Z signing_alg)r �nameZallowedr r r! r+ { s
z JWSCore._jwac C s< dj | j| jg�jd�}| jj| j|�}| j| jt|�d�S )zGenerates a signature�.zutf-8)r2 r3 � signature)�joinr2 r3 r1 r, �signr/ r )r �siginr9 r r r! r; � s
z JWSCore.signc C sd y.dj | j| jg�jd�}| jj| j||� W n0 tk
r^ } ztdt |���W Y dd}~X nX dS )z^Verifies a signature
:raises InvalidJWSSignature: if the verification fails.
r8 zutf-8zVerification failedNT)
r: r2 r3 r1 r, �verifyr/ � Exceptionr �repr)r r9 r< �er r r! r= � s zJWSCore.verify)N)r" r# r$ r% r r+ r; r= r r r r! r) U s
r) c @ s� e Zd ZdZd dd�Zdd� Zedd� �Zejd d� �Zed
d � �Z d d
� Z
d dd�Z d dd�Z d dd�Z
d!dd�Zd"dd�Zedd� �Zedd � �ZdS )#�JWSzFJSON Web Signature object
This object represent a JWS token.
Nc C s& t � | _|r|| jd< d| _d| _dS )z]Creates a JWS object.
:param payload(bytes): An arbitrary value (optional).
r3 N)r0 �objects� verifylog�
_allowed_algs)r r3 r r r! r � s
z JWS.__init__c C s@ x:|D ]2}|t kr td| ��qt | d std| ��qW d S )Nz Unknown critical header: "%s"� z!Unsupported critical header: "%s")�JWSHeaderRegistryr )r r �kr r r! � _check_crit� s
zJWS._check_critc C s | j r | j S tS dS )z�Allowed algorithms.
The list of allowed algorithms.
Can be changed by setting a list of algorithm names.
N)rD r6 )r r r r! � allowed_algs� s zJWS.allowed_algsc C s t |t�std��|| _d S )NzAllowed Algs must be a list)r- �list� TypeErrorrD )r r5 r r r! rI � s
c C s | j jdd�S )N�validF)rB �get)r r r r! �is_valid� s z JWS.is_validc C s8 x(t |j� �D ]}||krtd| ��qW |j|� |S )NzDuplicate header: "%s")rJ �keysr' �update)r Zh1Zh2rG r r r! �_merge_headers� s
zJWS._merge_headersc
C s� |d k rt |�}nt� }t|t�s*td��|rLt|t�s@td��| j||�}d|krb| j|d � |d krzd|krztd��|r�d|kr�||d kr�td||d f ��|}n|d }t||||| j�} | j|� d S )NzInvalid Protected headerzInvalid Unprotected headerr r zNo "alg" in headersz*"alg" mismatch, requested "%s", found "%s") r r0 r- r rQ rH r) rD r= )
r r r/ r3 r9 r2 r4 �p�a�cr r r! �_verify� s,
z JWS._verifyc C sH t � | _d| jd< | j}d|kr�y8| j|||d |d |jdd�|jdd�� d|d< W n6 tk
r� } z| jjd t|� � W Y dd}~X nX n�d
|k�r"x�|d
D ]v}y8| j|||d |d |jdd�|jdd�� d|d< W q� tk
�r } z| jjd t|� � W Y dd}~X q�X q�W ntd ��| j �sDtd t| j� ��dS )
a= Verifies a JWS token.
:param key: The (:class:`jwcrypto.jwk.JWK`) verification key.
:param alg: The signing algorithm (optional). usually the algorithm
is known as it is provided with the JOSE Headers of the token.
:raises InvalidJWSSignature: if the verification fails.
FrL r9 r3 r2 Nr4 Tz Failed: [%s]�
signatureszNo signatures availblez&Verification failed for all signatures)
rJ rC rB rU rM r> �appendr? r rN )r r/ r �objr@ �or r r! r= � s8
(
,z
JWS.verifyc C s� t � | _t � }�y�y�t|�}tt|d ��|d< d|kr�t� |d< x�|d D ]f}t � }tt|d ��|d< d|kr�tt|d ��}|jd�|d< d|kr�|d |d< |d j|� qLW nPtt|d ��|d< d|kr�tt|d ��}|jd�|d< d|k�r|d |d< W n� tk
�r� |j d�} t
| �dk�r<t d ��tt| d
��}t
|�d
k�rh|jd�|d< tt| d ��|d< tt| d ��|d< Y nX || _W n2 t k
�r� }
zt d
t
|
���W Y dd}
~
X nX |�r�| j||� dS )a� Deserialize a JWS token.
NOTE: Destroys any current status and tries to import the raw
JWS provided.
:param raw_jws: a 'raw' JWS token (JSON Encoded or Compact
notation) string.
:param key: A (:class:`jwcrypto.jwk.JWK`) verification key (optional).
If a key is provided a verification step will be attempted after
the object is successfully deserialized.
:param alg: The signing algorithm (optional). usually the algorithm
is known as it is provided with the JOSE Headers of the token.
:raises InvalidJWSObject: if the raw object is an invaid JWS token.
:raises InvalidJWSSignature: if the verification fails.
r3 rV r9 r2 zutf-8r4 r8 � zUnrecognized representationr rE � zInvalid formatN)r0 rB r r r rJ �decoderW r. �split�lenr' r> r? r= ) r Zraw_jwsr/ r rY Zdjws�s�osrR rT r@ r r r! � deserialize sJ
zJWS.deserializec C s� | j jdd�std��t� }|rPt|t�r2t|�}t|�}d|krP| j|d � |rzt|t�rft|�}t|�}| j||�}d|kr�|dkr�|d }n||d kr�t d��|dkr�t d��t
|||| j d �}|j � }t� } t |d �| d< |r�|| d < |�r|| d
< d | d < d
| j k�r*| j d
j
| � n�d| j k�r�t� | j d
< t� }
| j jd�|
d< d | j k�rt| j jd �|
d < d
| j k�r�| j jd
�|
d
< d | j k�r�| j jd �|
d < | j d
j
|
� | j d
j
| � n | j j| � dS )a! Adds a new signature to the object.
:param key: A (:class:`jwcrypto.jwk.JWK`) key of appropriate for
the "alg" provided.
:param alg: An optional algorithm name. If already provided as an
element of the protected or unprotected header it can be safely
omitted.
:param potected: The Protected Header (optional)
:param header: The Unprotected Header (optional)
:raises InvalidJWSObject: if no payload has been set on the object.
:raises ValueError: if the key is not a :class:`JWK` object.
:raises ValueError: if the algorithm is missing or is not provided
by one of the headers.
:raises InvalidJWAAlgorithm: if the algorithm is not valid, is
unknown or otherwise not yet implemented.
r3 NzMissing Payloadr r zF"alg" value mismatch, specified "alg" does not match JOSE header valuez"alg" not specifiedr9 r2 r4 TrL rV )rB rM r' r0 r- r r rH rQ r. r) r; r rW rJ �poprP ) r r/ r r2 r4 rR �hrT �sigrY �nr r r! �
add_signatureZ sZ
zJWS.add_signatureFc C s� |r�d| j krtd��d| j kr(td��| j jdd�s>td��d| j krXt| j d �}nd }d
j|t| j d �t| j d �g�S | j }d|kr�|jdd�s�td��t|d �t|d �d �}d|kr�t|d �|d< d
|kr�|d
|d
< n�d|k�r�t|d �t� d�}xr|d D ]f}|jdd��s(�qdt|d �i}d|k�rRt|d �|d< d
|k�rh|d
|d
< |d j|� �qW t|d �dk�r�td��ntd��t |�S dS )a� Serializes the object into a JWS token.
:param compact(boolean): if True generates the compact
representation, otherwise generates a standard JSON format.
:raises InvalidJWSOperation: if the object cannot serialized
with the compact representation and `compat` is True.
:raises InvalidJWSSignature: if no signature has been added
to the object, or no valid signature can be found.
rV z3Can't use compact encoding with multiple signaturesr9 zNo available signaturerL FzNo valid signature foundr2 r* r8 r3 )r3 r9 r4 )r3 rV r N)
rB r( r rM r r: rJ rW r^ r )r Zcompactr2 rX rd rY r_ r r r! � serialize� sN
z
JWS.serializec C s* d| j krtd��| js td��| j d S )Nr3 zPayload not availablezPayload not verified)rB r( rN )r r r r! r3 � s
z JWS.payloadc C s� | j }d|krNt� }d|kr4t|d �}| j||�}| j||jdt� ��}|S d| j kr�t� }xV|d D ]J}t� }d|kr�t|d �}| j||�}| j||jdt� ��}|j|� qhW |S td��d S )Nr9 r2 r4 rV z JOSE Header(s) not available)rB r0 r rQ rM rJ rW r( )r rX ZjhrR ZjhlrY r r r! � jose_header� s&
zJWS.jose_header)N)N)N)NN)NNN)F)r" r# r$ r% r rH �propertyrI �setterrN rQ rU r= ra rf rg r3 rh r r r r! rA � s
"
+
<
K
8 rA N)r T)r
F)r F)r T)r
F)r F)r F)r F)r T)r T)r T)Zjwcrypto.commonr r r r r Z jwcrypto.jwar Z jwcrypto.jwkr rF r6 r r' r( �objectr) rA r r r r! �<module> s2
B