File: //proc/thread-self/root/lib/python3.6/site-packages/jwcrypto/__pycache__/jwk.cpython-36.pyc
3
�e3[S| � @ s� d dl Z d dlmZmZ d dlmZ d dlmZ d dlm Z d dl
m Z d dl m
Z
mZ d dlmZ d d lmZ d d
lmZ d d lmZ d d lmZmZ d d
lmZmZ dddd�ZG dd� de�Zedd�Z e dddej �e dddej �e dddej �e dddej �d �e d ddej �e d ddej �e d ddej �e d ddej �e d!ddej �e d"ddej �e d#ddej �e d$ddej �e d%ddej �d&� d'e d(ddej �id�Z!e d)ddd�e d*ddd�e d+ddd�e d,ddd�e d-ddd�e d.ddd�e d/ddd�e d0ddd�e d1ddd�d2� Z"d3d4d5d6�Z#d7d8d9�Z$d:d;d<d=d>d?d@dAdB�Z%dCdDdEdF�Z&G dGdH� dHe�Z'G dIdJ� dJe�Z(G dKdL� dLe�Z)G dMdN� dNe�Z*G dOdP� dPe+�Z,G dQdR� dRe-�Z.G dSdT� dTe/�Z0dS )U� N)�hexlify� unhexlify)�
namedtuple)�Enum)�x509)�default_backend)�hashes�
serialization)�ec)�rsa)� iteritems)� JWException)�base64url_decode�base64url_encode)� json_decode� json_encodezElliptic Curve�RSAzOctet sequence)�ECr �octc @ s e Zd ZdZdZdZdZdS )�ParmTypezA string with a namezBase64url EncodedzBase64urlUint EncodedzUnsupported ParameterN)�__name__�
__module__� __qualname__�name�b64�b64U� unsupported� r r �/usr/lib/python3.6/jwk.pyr s r Z Parameterz description public required typeZCurveTz X Coordinatez Y CoordinatezECC Private KeyF)�crv�x�y�dZModulus�ExponentzPrivate ExponentzFirst Prime FactorzSecond Prime FactorzFirst Factor CRT ExponentzSecond Factor CRT ExponentzFirst CRT CoefficientzOther Primes Info) �n�er" �p�q�dp�dq�qiZoth�kz Key ValuezKey TypezPublic Key UsezKey OperationsZ AlgorithmzKey IDz X.509 URLzX.509 Certificate Chainz"X.509 Certificate SHA-1 Thumbprintz$X.509 Certificate SHA-256 Thumbprint) �kty�use�key_ops�alg�kidZx5uZx5cZx5tzx5t#S256z P-256 curvez P-384 curvez P-521 curve)zP-256zP-384zP-521zDigital Signature or MACZ
Encryption)�sig�encz Compute digital Signature or MACz Verify digital signature or MACzEncrypt contentz6Decrypt content and validate decryption, if applicablez Encrypt keyz2Decrypt key and validate decryption, if applicablez
Derive keyz#Derive bits not to be used as a key)�sign�verify�encrypt�decrypt�wrapKey� unwrapKey� deriveKey�
deriveBitszP-256zP-384zP-521)Z secp256r1Z secp384r1Z secp521r1c s* e Zd ZdZd� fdd� Zdd� Z� ZS )�InvalidJWKTypezfInvalid JWK Type Exception.
This exception is raised when an invalid parameter type is used.
Nc s t t| �j� || _d S )N)�superr; �__init__�value)�selfr> )� __class__r r r= u s zInvalidJWKType.__init__c C s d| j ttj� �f S )Nz&Unknown type "%s", valid types are: %s)r> �list�JWKTypesRegistry�keys)r? r r r �__str__y s zInvalidJWKType.__str__)N)r r r �__doc__r= rD �
__classcell__r r )r@ r r; o s r; c s( e Zd ZdZ� fdd�Zdd� Z� ZS )�InvalidJWKUsagez�Invalid JWK usage Exception.
This exception is raised when an invalid key usage is requested,
based on the key type and declared usage constraints.
c s t t| �j� || _|| _d S )N)r< rG r= r> r- )r? r- r> )r@ r r r= � s zInvalidJWKUsage.__init__c C s\ | j ttj� �kr t| j }n
d| j }| jttj� �krFt| j }n
d| j }d||f S )Nz Unknown(%s)z.Invalid usage requested: "%s". Valid for: "%s")r- rA �JWKUseRegistryrC r> )r? �usage�validr r r rD � s
zInvalidJWKUsage.__str__)r r r rE r= rD rF r r )r@ r rG ~ s rG c s( e Zd ZdZ� fdd�Zdd� Z� ZS )�InvalidJWKOperationz�Invalid JWK Operation Exception.
This exception is raised when an invalid key operation is requested,
based on the key type and declared usage constraints.
c s t t| �j� || _|| _d S )N)r< rK r= �op�values)r? � operationrM )r@ r r r= � s z InvalidJWKOperation.__init__c C sx | j ttj� �kr t| j }n
d| j }t� }x<| jD ]2}|ttj� �krZ|jt| � q6|jd| � q6W d||f S )Nz Unknown(%s)z2Invalid operation requested: "%s". Valid for: "%s")rL rA �JWKOperationsRegistryrC rM �append)r? rL rJ �vr r r rD � s
zInvalidJWKOperation.__str__)r r r rE r= rD rF r r )r@ r rK � s rK c @ s e Zd ZdZdS )�InvalidJWKValuez�Invalid JWK Value Exception.
This exception is raised when an invalid/unknown value is used in the
context of an operation that requires specific values to be used based
on the key type or other constraints.
N)r r r rE r r r r rR � s rR c @ s� e Zd ZdZdd� Zedd� �Zdd� Zd]d d
�Zd d � Z d
d� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd � Zd d � Zed d � �Zd^d"d#�Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zed0d1� �Z ed2d3� �Z ed4d5� �Z ed6d7� �Z ed8d9� �Z ed:d;� �Z!d<d=� Z"d>d?� Z#d@dA� Z$dBdC� Z%dDdE� Z&dFdG� Z'dHdI� Z(d_dJdK�Z)d`dLdM�Z*dadNdO�Z+dPdQ� Z,dbdRdS�Z-dcdUdV�Z.edWdX� �Z/edddYdZ��Z0e1j2� fd[d\�Z3dS )e�JWKz�JSON Web Key object
This object represent a Key.
It must be instantiated by using the standard defined key/value pairs
as arguments of the initialization function.
c K sB t � | _t � | _t � | _d|kr.| jf |� n|r>| jf |� dS )a2 Creates a new JWK object.
The function arguments must be valid parameters as defined in the
'IANA JSON Web Key Set Parameters registry' and specified in
the :data:`JWKParamsRegistry` variable. The 'kty' parameter must
always be provided and its value must be a valid one as defined
by the 'IANA JSON Web Key Types registry' and specified in the
:data:`JWKTypesRegistry` variable. The valid key parameters per
key type are defined in the :data:`JWKValuesregistry` variable.
To generate a new random key call the class method generate() with
the appropriate 'kty' parameter, and other parameters as needed (key
size, public exponents, curve types, etc..)
Valid options per type, when generating new keys:
* oct: size(int)
* RSA: public_exponent(int), size(int)
* EC: curve(str) (one of P-256, P-384, P-521)
Deprecated:
Alternatively if the 'generate' parameter is provided, with a
valid key type as value then a new key will be generated according
to the defaults or provided key strenght options (type specific).
:raises InvalidJWKType: if the key type is invalid
:raises InvalidJWKValue: if incorrect or inconsistent parameters
are provided.
�generateN)�dict�_params�_key�_unknown� generate_key�
import_key)r? �kwargsr r r r= � s z JWK.__init__c K sR | � }d }y|d }t |d| �}W n ttfk
rD t|��Y nX ||� |S )Nr, z _generate_%s)�getattr�KeyError�AttributeErrorr; )�clsr[ �objr, �genr r r rT � s z JWK.generatec K sN d }y |j d�}t| d| �}W n ttfk
r@ t|��Y nX ||� d S )NrT z _generate_%s)�popr\ r] r^ r; )r? �paramsr, ra r r r rY � s
zJWK.generate_keyNc C sf |}d|kr|j d�}nJd|krby ddlm} |j|d �}W n tk
rZ td��Y nX |j}|S )N�sizer/ r )�JWAzInvalid 'alg' parameter)rb Z jwcrypto.jware Zinstantiate_algr] �
ValueErrorZkeysize)r? rc Z default_sizerd re r/ r r r �
_get_gen_size s zJWK._get_gen_sizec C s> | j |d�}tj|d �}d|d< t|�|d< | jf |� d S )N� � r r, r+ )rg �os�urandomr rZ )r? rc rd �keyr r r �
_generate_oct s
zJWK._generate_octc C s0 t |�jd�jd�}ttt|�d d | ��S )N�LZ0x� �0)�hex�rstrip�lstripr r �len)r? �iZintgr r r � _encode_int s zJWK._encode_intc C sD d}| j |d�}d|kr"|jd�}tj||t� �}| j|f|� d S )Ni i Zpublic_exponent)rg rb r �generate_private_keyr �_import_pyca_pri_rsa)r? rc Zpubexprd rl r r r �
_generate_RSA s
zJWK._generate_RSAc K sx |j � }|jd| j|jj�| j|jj�| j|j�| j|j�| j|j�| j|j �| j|j
�| j|j �d� | j f |� d S )Nr ) r, r$ r% r" r& r' r( r) r* )
�private_numbers�updaterv �public_numbersr$ r% r" r& r' Zdmp1Zdmq1ZiqmprZ )r? rl rc �pnr r r rx ! s
zJWK._import_pyca_pri_rsac K s8 |j � }|jd| j|j�| j|j�d� | jf |� d S )Nr )r, r$ r% )r| r{ rv r$ r% rZ )r? rl rc r} r r r �_import_pyca_pub_rsa0 s
zJWK._import_pyca_pub_rsac C s< |dkrt j� S |dkr t j� S |dkr0t j� S td��d S )NzP-256zP-384zP-521zUnknown Elliptic Curve Type)r
Z SECP256R1Z SECP384R1Z SECP521R1rR )r? r r r r �_get_curve_by_name9 s zJWK._get_curve_by_namec C sR d}d|kr|j d�}d|kr(|j d�}| j|�}tj|t� �}| j|f|� d S )NzP-256�curver )rb r r
rw r �_import_pyca_pri_ec)r? rc r� Z
curve_namerl r r r � _generate_ECC s
zJWK._generate_ECc K sP |j � }|jdt|jj | j|jj�| j|jj�| j|j �d� | j
f |� d S )Nr )r, r r r! r" ) rz r{ �JWKpycaCurveMapr� r rv r| r r! Z
private_valuerZ )r? rl rc r} r r r r� O s
zJWK._import_pyca_pri_ecc K sB |j � }|jdt|jj | j|j�| j|j�d� | jf |� d S )Nr )r, r r r! ) r| r{ r� r� r rv r r! rZ )r? rl rc r} r r r �_import_pyca_pub_ecZ s
zJWK._import_pyca_pub_ecc K s� t |j� �}xBt tj� �D ]2}||kr|| | j|< x||krJ|j|� q6W qW | jjdd �}|tkrnt|��xFt t| j� �D ]2}||kr�|| | j |< x||kr�|j|� q�W q�W x�t
t| �D ]�\}}|j r�|| j kr�t d| ��|j
tjko�|| j k�r t d| ��|j
tjk�r\|| j k�r\yt| j | � W n" tk
�rZ t d| ��Y nX |d tjkr�|| j kr�y| j| j | � W q� tk
�r� t d| ��Y q�X q�W x |D ]}|| | j|< �q�W t| j �dk�r�t d��d | jk�rFxR| jd D ]D}d}x&| jd D ]}||k�r|d
7 }�qW |d
k�r�t d ���q�W d | jk�r�d | jk�r�d
dg} ddddddg}
| jd dk�r�x`|
D ] } | | jd k�r�t d���q�W n8| jd dk�r�x&| D ] } | | jd k�r�t d���q�W d S )Nr, zMissing required value %szUnsupported parameter %sz "%s" is not base64url encoded� z!"%s" is not Base64urlUInt encodedr zNo Key Values foundr. � z Duplicate values in "key_ops"r- r3 r4 r5 r6 r7 r8 r9 r: r1 zBIncompatible "use" and "key_ops" values specified at the same timer2 )rA rC �JWKParamsRegistryrV �remove�getrB r; �JWKValuesRegistryrW r �requiredrR �typer r r r � Exceptionr � _decode_intrX rt ) r? r[ �namesr r, �valZko�cZckoZsiglZenclrL r r r rZ d sn
zJWK.import_keyc C sJ | � }y t |�}W n* tk
r< } zt|��W Y dd}~X nX |jf |�S )zyCreates a RFC 7517 JWK from the standard JSON format.
:param key: The RFC 7517 representation of a JWK.
N)r r� rR rZ )r_ rl r` Zjkeyr% r r r � from_json� s z
JWK.from_jsonTc C s |dkr| j � S | j� S dS )a+ Exports the key in the standard JSON format.
Exports the key regardless of type, if private_key is False
and the key is_symmetric an exceptionis raised.
:param private_key(bool): Whether to export the private key.
Defaults to True.
TN)� _export_all�
export_public)r? � private_keyr r r �export� s z
JWK.exportc C s | j � }t|�S )z�Exports the public key in the standard JSON format.
It fails if one is not available like when this function
is called on a symmetric key.
)�_public_paramsr )r? �pubr r r r� � s zJWK.export_publicc C s~ | j std��i }t}x.|D ]&}|| jr || jkr | j| ||< q W t| jd }x$|D ] }|| jrZ| j| ||< qZW |S )NzNo public key availabler, )�
has_publicr; r� �publicrV r� rW )r? r� Zpregr �regZparamr r r r� � s
zJWK._public_paramsc C s2 t � }|j| j� |j| j� |j| j� t|�S )N)rU r{ rV rW rX r )r? r" r r r r� � s
zJWK._export_allc C s | j r| j� S td��dS )z�Export the private key in the standard JSON format.
It fails for a JWK that has only a public key or is symmetric.
zNo private key availableN)� has_privater� r; )r? r r r �export_private� s zJWK.export_privatec C s | j r| j� S td��d S )NzNot a symmetric key)� is_symmetricr� r; )r? r r r �export_symmetric� s zJWK.export_symmetricc C s | j � }tf |�S )N)r� rS )r? r� r r r r� � s z
JWK.publicc C sB | j r
dS t| jd }x$|D ] }|| jr || jkr dS q W dS )z.Whether this JWK has an asymmetric Public key.Fr, TN)r� r� rV r� rW )r? r� r> r r r r� � s
zJWK.has_publicc C sD | j r
dS t| jd }x&|D ] }|| j r || jkr dS q W dS )z3Whether this JWK has an asymmetric key Private key.Fr, T)r� r� rV r� rW )r? r� r> r r r r� s
zJWK.has_privatec C s
| j dkS )z$Whether this JWK is a symmetric key.r )�key_type)r? r r r r� s zJWK.is_symmetricc C s | j jdd�S )z The Key typer, N)rV r� )r? r r r r� s z JWK.key_typec C s | j jdd�S )z^The Key ID.
Provided by the kid parameter if present, otherwise returns None.
r0 N)rV r� )r? r r r �key_id s z
JWK.key_idc C s | j d dkrtd��| jd S )zThe Curve Name.r, r z
Not an EC keyr )rV r; rW )r? r r r � key_curve" s z
JWK.key_curvec C sN | j }| jd dkr td��|r@|d |kr@td||d f ��| j|d �S )z�Gets the Elliptic Curve associated with the key.
:param arg: an optional curve name
:raises InvalidJWKType: the key is not an EC key.
:raises InvalidJWKValue: if the curve names is invalid.
r, r z
Not an EC keyr z.Curve requested is "%s", but key curve is "%s")rW rV r; rR r )r? �argr+ r r r � get_curve) s z
JWK.get_curvec C s\ | j jdd �}|r$||kr$t||��| j jdd �}|rXt|t�sF|g}||krXt||��d S )Nr- r. )rV r� rG �
isinstancerA rK )r? rI rN r- Zopsr r r �_check_constraints: s
zJWK._check_constraintsc C s t tt|��d�S )N� )�intr r )r? r$ r r r r� F s zJWK._decode_intc C s t j| j|d �| j|d ��S )Nr% r$ )r ZRSAPublicNumbersr� )r? r+ r r r �_rsa_pubI s z JWK._rsa_pubc C sX t j| j|d �| j|d �| j|d �| j|d �| j|d �| j|d �| j|��S )Nr& r' r" r( r) r* )r ZRSAPrivateNumbersr� r� )r? r+ r r r �_rsa_priM s z JWK._rsa_pric C s( t j| j|d �| j|d �| j|��S )Nr r! )r
ZEllipticCurvePublicNumbersr� r� )r? r+ r� r r r �_ec_pubV s z JWK._ec_pubc C s t j| j|d �| j||��S )Nr" )r
ZEllipticCurvePrivateNumbersr� r� )r? r+ r� r r r �_ec_pri[ s z JWK._ec_pric C sf | j d dkr| jd S | j d dkr:| j| j�jt� �S | j d dkr^| j| j|�jt� �S t�d S )Nr, r r+ r r )rV rW r� �
public_keyr r� �NotImplementedError)r? r� r r r �_get_public_key_ s
zJWK._get_public_keyc C sf | j d dkr| jd S | j d dkr:| j| j�jt� �S | j d dkr^| j| j|�jt� �S t�d S )Nr, r r+ r r )rV rW r� r� r r� r� )r? r� r r r �_get_private_keyi s
zJWK._get_private_keyc C s� | j jdttj� ��}|tk r$|g}|dkrP| j d dkrD| jd S t||��n�|dkrn| jd|� | j|�S |dkr�| jd|� | j |�S |d ks�|d
kr�| jd |� | j |�S |d ks�|d
kr�| jd |� | j|�S t
�dS )a� Get the key object associated to the requested opration.
For example the public RSA key for the 'verify' operation or
the private EC key for the 'decrypt' operation.
:param operation: The requested operation.
The valid set of operations is availble in the
:data:`JWKOperationsRegistry` registry.
:param arg: an optional, context specific, argument
For example a curve name.
:raises InvalidJWKOperation: if the operation is unknown or
not permitted with this key.
:raises InvalidJWKUsage: if the use constraints do not permit
the operation.
r. Nr, r r+ r3 r1 r4 r5 r7 r2 r6 r8 ) rV r� rA rO rC rW rK r� r� r� r� )r? rN r� Zvalidopsr r r �
get_op_keys s*
zJWK.get_op_keyc C sp t |tj�r| j|� nTt |tj�r0| j|� n<t |tj�rH| j|� n$t |tj �r`| j
|� n t d| ��d S )NzUnknown key object %r) r� r Z
RSAPrivateKeyrx Z RSAPublicKeyr~ r
ZEllipticCurvePrivateKeyr� ZEllipticCurvePublicKeyr� rR )r? rl r r r �import_from_pyca� s zJWK.import_from_pycac C s� yt j||t� d�}W n� tk
r� } zr|dk r4|�yt j|t� d�}W nJ tk
r� y tj|t� d�}|j� }W n tk
r� |�Y nX Y nX W Y dd}~X nX | j|� | j � | j
d< dS )at Imports a key from data loaded from a PEM file.
The key may be encrypted with a password.
Private keys (PKCS#8 format), public keys, and X509 certificate's
public keys can be imported with this interface.
:param data(bytes): The data contained in a PEM file.
:param password(bytes): An optional password to unwrap the key.
)�password�backendN)r� r0 ) r Zload_pem_private_keyr rf Zload_pem_public_keyr Zload_pem_x509_certificater� r� �
thumbprintrV )r? �datar� rl r% Zcertr r r �import_from_pem� s$
"
zJWK.import_from_pemFc C s� t jj}|rx| jstd��t jj}|dkr4t j� }n0t|t �rJt j
|�}n|dkr\t d��nt d��| j
� j|||d�S | js�td��t jj}| j� j||d�S dS ) a
Exports keys to a data buffer suitable to be stored as a PEM file.
Either the public or the private key can be exported to a PEM file.
For private keys the PKCS#8 format is used. If a password is provided
the best encryption method available as determined by the cryptography
module is used to wrap the key.
:param private_key: Whether the private key should be exported.
Defaults to `False` which means the public key is exported by default.
:param password(bytes): A password for wrapping the private key.
Defaults to False which will cause the operation to fail. To avoid
encryption the user must explicitly pass None, otherwise the user
needs to provide a password in a bytes buffer.
zNo private key availableNFz+The password must be None or a bytes stringz!The password string must be bytes)�encoding�formatZencryption_algorithmzNo public key available)r� r� )r ZEncodingZPEMr� r; Z
PrivateFormatZPKCS8Z NoEncryptionr� �bytesZBestAvailableEncryptionrf � TypeErrorr� Z
private_bytesr� Z PublicFormatZSubjectPublicKeyInfor� Z public_bytes)r? r� r� r% �f�ar r r �
export_to_pem� s$
zJWK.export_to_pemc C s | � }|j |� |S )N)r� )r_ rl r` r r r � from_pyca� s
z
JWK.from_pycac C s | � }|j ||� |S )a Creates a key from PKCS#8 formatted data loaded from a PEM file.
See the function `import_from_pem` for details.
:param data(bytes): The data contained in a PEM file.
:param password(bytes): An optional password to unwrap the key.
)r� )r_ r� r� r` r r r �from_pem� s z JWK.from_pemc C st d| j d i}x0tt|d �D ] \}}|jr | j| ||< q W tj|t� d�}|jt t
|�j d��� t |j
� �S )z{Returns the key thumbprint as specified by RFC 7638.
:param hashalg: A hash function (defaults to SHA256)
r, )r� �utf8)rV r r� r� rW r ZHashr r{ r� r �encoder �finalize)r? Zhashalg�tr r� Zdigestr r r r� � s zJWK.thumbprint)N)T)N)N)NN)N)FF)N)4r r r rE r= � classmethodrT rY rg rm rv ry rx r~ r r� r� r� rZ r� r� r� r� r� r� r� r� �propertyr� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r ZSHA256r� r r r r rS � s\ &
M
'
# rS c @ s e Zd Zdd� ZdS )�_JWKkeysc C s" t |t�std��tj| |� dS )z�Adds a JWK object to the set
:param elem: the JWK object to add.
:raises TypeError: if the object is not a JWK.
z#Only JWK objects are valid elementsN)r� rS r� �set�add)r? �elemr r r r�
s
z _JWKkeys.addN)r r r r� r r r r r� s r� c sr e Zd ZdZ� fdd�Zdd� Zdd� Z� fdd �Zd
d � Zd d
� Z ddd�Z
dd� Z e dd� �Z
dd� Z� ZS )�JWKSetz�A set of JWK objects.
Inherits from the standard 'dict' bultin type.
Creates a special key 'keys' that is of a type derived from 'set'
The 'keys' attribute accepts only :class:`jwcrypto.jwk.JWK` elements.
c s2 t t| �j� t t| �jdt� � | j||� d S )NrC )r< r� r= � __setitem__r� r{ )r? �argsr[ )r@ r r r= s zJWKSet.__init__c C s | d j � S )NrC )�__iter__)r? r r r r� " s zJWKSet.__iter__c C s | d j |�S )NrC )� __contains__)r? rl r r r r� % s zJWKSet.__contains__c s. |dkr| d j |� ntt| �j||� d S )NrC )r� r< r� r� )r? rl r� )r@ r r r� ( s zJWKSet.__setitem__c O s, x&t t||��D ]\}}| j||� qW d S )N)r rU r� )r? r� r[ r+ rQ r r r r{ . s z
JWKSet.updatec C s | d j |� d S )NrC )r� )r? r� r r r r� 2 s z
JWKSet.addTc C s` t � }xPt| �D ]D\}}|dkrLt� }x |D ]}|jt|j|��� q,W |}|||< qW t|�S )z�Exports a RFC 7517 keyset using the standard JSON format
:param private_key(bool): Whether to export private keys.
Defaults to True.
rC )rU r rA rP r r� r )r? Z private_keysZexp_dictr+ rQ rC �jwkr r r r� 5 s
z
JWKSet.exportc C s� y t |�}W n tk
r& t� �Y nX d|kr6t� �xHt|�D ]<\}}|dkrtx*|D ]}| d jtf |�� qVW q@|| |< q@W | S )z�Imports a RFC 7517 keyset using the standard JSON format.
:param keyset: The RFC 7517 representation of a JOSE Keyset.
rC )r r� rR r r� rS )r? �keysetZjwksetr+ rQ r� r r r �
import_keysetE s
zJWKSet.import_keysetc C s | � }|j |�S )z�Creates a RFC 7517 keyset from the standard JSON format.
:param keyset: The RFC 7517 representation of a JOSE Keyset.
)r� )r_ r� r` r r r r� [ s zJWKSet.from_jsonc C s$ x | d D ]}|j |kr
|S q
W dS )zOGets a key from the set.
:param kid: the 'kid' key identifier.
rC N)r� )r? r0 r� r r r �get_keyd s
zJWKSet.get_key)T)r r r rE r= r� r� r� r{ r� r� r� r� r� r� rF r r )r@ r r� s
r� )1rj Zbinasciir r � collectionsr �enumr Z cryptographyr Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr
r Zsixr Zjwcrypto.commonr
r r r r rB r Z JWKParameterr r r r r� r� ZJWKEllipticCurveRegistryrH rO r� r; rG rK rR �objectrS r� r� rU r� r r r r �<module> s�
O