Name	Size	Mode	Actions
encoding.cpython-36.pyc	1794	0644	editdlrm
exc.cpython-36.pyc	3339	0644	editdlrm
jws.cpython-36.pyc	7452	0644	editdlrm
serializer.cpython-36.pyc	9515	0644	editdlrm
signer.cpython-36.pyc	8339	0644	editdlrm
timed.cpython-36.pyc	6192	0644	editdlrm
url_safe.cpython-36.pyc	2644	0644	editdlrm
_json.cpython-36.pyc	1490	0644	editdlrm
__init__.cpython-36.pyc	972	0644	editdlrm

3 _TBg��@s�dd
lZdd
l
Z
dd
lZddlmZ
ddlmZ
ddlmZ
ddlmZ
ddl m Z
ddlmZ
dd lm Z
dd lmZ
ddlmZ
ddlmZ
dd lmZ
ddlmZ
ddlmZ
ddlmZ
ddlmZ
ddlmZ
Gdd�de�ZGdd�de�Zd
S)�N)
�datetime)
�timezone)
�Decimal)
�Real�
)
�_CompactJSON)
� base64_decode)
� base64_encode)
� want_bytes)
�BadData)
� BadHeader)
� BadPayload)
�BadSignature)
�SignatureExpired)
� Serializer)
� HMACAlgorithm)
� NoneAlgorithmcs�eZ
dZd
Zeej�
eej�
eej�
e �d�Z dZeZ d�f
dd� Zd�f
dd � Zd d�Zdd �Zddd�
Zdd�Zddd�
Zddd�
Zddd�
Z�ZS)�JSONWebSignatureSerializerz�This serializer implements JSON Web Signature (JWS) support. Only supports the JWS Compact Serialization. .. deprecated:: 2.0 Will be removed in ItsDangerous 2.1. Use a dedicated library such as authlib. )ZHS256ZHS384�HS512�nonerNcsLtj
d
tdd�
t�j|
|||||d�
|dkr6|j}||_|j|�
|_dS)NzsJWS support is deprecated and will be removed in ItsDangerous 2.1. Use a dedicated JWS/JWT library such as authlib.�)
� stacklevel)�salt� serializer�serializer_kwargs�signer� signer_kwargs) �warnings�warn�DeprecationWarning�super�__init__�default_algorithm�algorithm_name�make_algorithm� algorithm)�self� secret_keyrrrrrr#)
� __class__��8/tmp/pip-build-0s3hx122/itsdangerous/itsdangerous/jws.pyr!,s 









z#JSONWebSignatureSerializer.__init__Fc .s
t|
�
}
d
|
krt
d�
�
|
jd
d�\}}yt|�
}Wn.tk rb
}
ztd|d��
WYdd}~XnXyt|�
}Wn.tk r�
}
zt
d|d��
WYdd}~XnXyt�j|td�} Wn.t k r�
}
ztd|d��
WYdd}~XnXt | t�s�td | d ��
t�j||d�}
|�
r|
| fS|
S)N�
.zNo "." found in valuerz:Could not base64 decode the header because of an exception)
�original_errorz;Could not base64 decode the payload because of an exception)
rz5Could not unserialize header because it was malformedz#Header payload is not a JSON object)
�header)r r �splitr� Exceptionrr �load_payloadrr� isinstance�dict) r&�payloadr� return_header�base64d_header�base64d_payloadZjson_header�
eZjson_payloadr-)
r(r)r*r0Ls8


















z'JSONWebSignatureSerializer.load_payloadcCs8t|j
j|
f
|j�
�
}t|j
j|f
|j�
�
}|d
|S)Nr+)r r�dumpsr)r&r-�objr5r6r)r)r*�dump_payloadvs


z'JSONWebSignatureSerializer.dump_payloadcCs,y |j|
St
k r&


td
�
�
YnXdS)NzAlgorithm not supported)�jws_algorithms�KeyError�NotImplementedError)r&r#r)r)r*r$s



z)JSONWebSignatureSerializer.make_algorithmcCsB|
dkr|j}
|
dkrd
nd}|dkr,|j
}|j|j|
d||d�S)Nr�
.)r�sep�key_derivationr%)rr%rZsecret_keys)r&rr%r@r)r)r*�make_signer�s







z&JSONWebSignatureSerializer.make_signercCs|
r|
j�ni}|j
|d
<|S)N�alg)�copyr#)r&� header_fieldsr-r)r)r*�make_header�s


z&JSONWebSignatureSerializer.make_headercCs*|j|�
}|j
||j�}|j|j||
��
S)
z�Like :meth:`.Serializer.dumps` but creates a JSON Web Signature. It also allows for specifying additional fields to be included in the JWS header. )rErAr%�signr:)r&r9rrDr-rr)r)r*r8�s

z JSONWebSignatureSerializer.dumpscCsT|j|j
||j�jt|
�
�
d
d�\}}|jd�
|jkrDtd||d��
|rP||fS|S)z{Reverse of :meth:`dumps`. If requested via ``return_header`` it will return a tuple of payload and header. T)
r4rBzAlgorithm mismatch)r-r3)r0rAr%Zunsignr �getr#r)r&�
srr4r3r-r)r)r*�loads�s



z JSONWebSignatureSerializer.loadscCsd
|i
}|j|
|||�S)Nr4)
Z_loads_unsafe_impl)r&rHrr4�kwargsr)r)r*�loads_unsafe�s

z'JSONWebSignatureSerializer.loads_unsafe)NNNNNN)NF)NN)NN)NF)NF)�__name__� __module__�__qualname__�__doc__r�hashlib�sha256�sha384�sha512rr;r"rZdefault_serializerr!r0r:r$rArEr8rIrK� __classcell__r)r))
r(r*rs*







*   rcsPeZ
dZd
ZdZd�f
dd� Z�f
dd�Zd�f
d d � Zdd�Zd d�Z �Z S)�TimedJSONWebSignatureSerializera�
Works like the regular :class:`JSONWebSignatureSerializer` but also records the time of the signing and can be used to expire signatures. JWS currently does not specify this behavior but it mentions a possible extension like this in the spec. Expiry date is encoded into the header similar to what's specified in `draft-ietf-oauth -json-web-token `_. iNcs(t�j
|
f
|�

|dkr|j}||_dS)
N)r r!�DEFAULT_EXPIRES_IN� expires_in)r&r'rWrJ)
r(r)r*r!�s

z(TimedJSONWebSignatureSerializer.__init__cs2t�j
|
�
}|j�}||j}||d
<||d<|S)N�iat�exp)r rE�nowrW)r&rDr-rXrY)
r(r)r*rE�s





z+TimedJSONWebSignatureSerializer.make_headerFc s�t�j
|
|d
d�\}}d|kr*td|d��
td|d�}yt|d�
|d<Wntk rb


|�
YnX|ddkrt|�
|d|j�kr�td||j|�
d ��
|r�||fS|S) NT)
r4rYzMissing expiry date)
r3zExpiry date is not an IntDater
zSignature expired)r3Zdate_signed) r rIrr�int� ValueErrorrZr�get_issue_date)r&rHrr4r3r-Zint_date_error)
r(r)r*rI�s$










z%TimedJSONWebSignatureSerializer.loadscCs0|
jd
�
}t
|ttf�r,tjt|�
tjd�SdS)aR
If the header contains the ``iat`` field, return the date the signature was issued, as a timezone-aware :class:`datetime.datetime` in UTC. .. versionchanged:: 2.0 The timestamp is returned as a timezone-aware ``datetime`` in UTC rather than a naive ``datetime`` assumed to be UTC. rX)
�tzN) rGr1rrr� fromtimestampr[r�utc)r&r-�rvr)r)r*r]�s 
z.TimedJSONWebSignatureSerializer.get_issue_datec

Cstt
j
��
S)
N)r[�time)
r&r)r)r*rZ
s
z#TimedJSONWebSignatureSerializer.now)
N)NF)rLrMrNrOrVr!rErIr]rZrTr)r))
r(r*rU�s rU)rPrbrrr�decimalrZnumbersr�_jsonr�encodingrr r �excrrr rrrrrrrrrUr)r)r)r*�
s*
















$