o b@sddlZddlZddlZddlmZmZmZmZmZddl m Z ddl m Z m Z ddlmZddlmZdd lmZGd d d eZd d ZddZdS)N) text_typesto_bytes to_unicode json_loads json_dumps) JWTClaims) DecodeErrorInsecureClaimError)JsonWebSignature)JsonWebEncryption)KeySetc@sReZdZdZedgdejZdddZ ddZ dd d Z  dd d Z dS) JsonWebToken)passwordtokensecretZ secret_key|)z1\b(?:3[47]\d|(?:4\d|5[1-5]|65)\d{2}|6011)\d{12}\bzB-----BEGIN[A-Z ]+PRIVATE KEY-----.+-----END[A-Z ]+PRIVATE KEY-----z3^\b(?!(000|666|9))\d{3}-(?!00)\d{2}-(?!0000)\d{4}\bNcCs t||d|_t||d|_dS)N)private_headers)r _jwsr _jwe)selfZ algorithmsrrW/var/www/secure340b-portal/env/lib/python3.10/site-packages/authlib/jose/rfc7519/jwt.py__init__szJsonWebToken.__init__cCsF|D]}||jvr t|||}t|tr |j|r t|qdS)z0Check if payload contains sensitive information.N)SENSITIVE_NAMESr isinstancerSENSITIVE_VALUESsearch)rpayloadkvrrrcheck_sensitive_datas z!JsonWebToken.check_sensitive_dataTcCsd|d<dD]}||}t|tjrt|||<q|r$||t||}t|r2|||}t t |}d|vrD|j |||S|j |||S)aEncode a JWT with the given header, payload and key. :param header: A dict of JWS header :param payload: A dict to be encoded :param key: key used to sign the signature :param check: check if sensitive data in payload :return: bytes ZJWTtyp)expZiatZnbfenc)getrdatetimecalendartimegm utctimetupler"prepare_raw_keycallablerrrZserialize_compactr)rheaderrkeycheckr Zclaimtextrrrencode+s       zJsonWebToken.encodec s~|durt}fdd}t|}|d}|dkr"|j||t}n|dkr/|j||t}ntd||d|d ||d S) aDecode the JWS with the given key. This is similar with :meth:`verify`, except that it will raise BadSignatureError when signature doesn't match. :param s: text of JWT :param key: key used to verify the signature :param claims_cls: class to be used for JWT claims :param claims_options: `options` parameters for claims_cls :param claims_params: `params` parameters for claims_cls :return: claims_cls instance :raise: BadSignatureError Ncs t|}t|r|||S|S)N)r+r,)r-rZkey_funcr.rrload_keyZs  z%JsonWebToken.decode..load_key.r zInvalid input segments lengthrr-)optionsparams)rrcountrZdeserialize_compactdecode_payloadrr ) rsr.Z claims_clsZclaims_optionsZ claims_paramsr3 dot_countdatarr2rdecodeIs   zJsonWebToken.decode)NN)T)NNN) __name__ __module__ __qualname__rrecompilejoinDOTALLrrr"r1r=rrrrrs  rcCs>ztt|}Wn tytdwt|tstd|S)NzInvalid payload valuezInvalid payload type)rr ValueErrorr rdict)Z bytes_payloadrrrrr9os  r9cCst|tr ||dSt|tr!|dr!|dr!t|}n t|tt fr,d|i}t|t rRd|vrR|d}|d}|D] }|d|krM|Sq@t d|S)Nkid{}keyszInvalid JSON Web Key Set) rrZ find_by_kidr&r startswithendswithrtuplelistrFrE)rawheadersrJrGr rrrr+ys&    r+)rAr'r(Zauthlib.common.encodingrrrrrZclaimsrerrorsr r Zrfc7515r Zrfc7516r Zrfc7517robjectrr9r+rrrrs    `