Name	Size	Mode	Actions
encoding.cpython-36.pyc	1794	0644	editdlrm
exc.cpython-36.pyc	3339	0644	editdlrm
jws.cpython-36.pyc	7452	0644	editdlrm
serializer.cpython-36.pyc	9515	0644	editdlrm
signer.cpython-36.pyc	8339	0644	editdlrm
timed.cpython-36.pyc	6192	0644	editdlrm
url_safe.cpython-36.pyc	2644	0644	editdlrm
_json.cpython-36.pyc	1490	0644	editdlrm
__init__.cpython-36.pyc	972	0644	editdlrm

3 _TBg�$�@s�dd
lZdd
l
Z
dd
lZddlmZ
ddlmZ
ddlmZ
ddlmZ
ddl m Z
ejee fZejeZejejeefZGdd �d �ZGd d�de�ZGdd �d e�Zeeje d�dd�ZGdd�d�Zd
S)�N�
)
�_base64_alphabet)
� base64_decode)
� base64_encode)
� want_bytes)
�BadSignaturec@s6eZ
dZd
Zeeed�dd�Zeeeed�dd�ZdS) �SigningAlgorithmzgSubclasses must implement :meth:`get_signature` to provide signature generation functionality. )�key�value�returnc
Cs t��
d
S)z2Returns the signature for the given key and value.N)
�NotImplementedError)�selfr r �r�;/tmp/pip-build-0s3hx122/itsdangerous/itsdangerous/signer.py� get_signatureszSigningAlgorithm.get_signature)r r �sigrcCstj
||j|
|��S)
zMVerifies the given signature matches the expected signature. )�hmac�compare_digestr)r r r rrrr�verify_signaturesz!SigningAlgorithm.verify_signatureN)�__name__� __module__�__qualname__�__doc__�bytesr�boolrrrrrrsrc@s"eZ
dZd
Zeeed�dd�ZdS)� NoneAlgorithmz`Provides an algorithm that does not perform any signing and returns an empty signature. )r r rc
Csd
S)N�r)r r r rrrr%s
zNoneAlgorithm.get_signatureN)rrrrrrrrrrr src@sFeZ
dZUd
Zeej�
Zej d ej d�
dd�Z eeed�dd�ZdS) � HMACAlgorithmz*Provides signature generation using HMACs.N)
� digest_methodcCs|
dkr|j}
|
|_
dS)
N)�default_digest_methodr)r rrrr�__init__1s

zHMACAlgorithm.__init__)r r rcCstj
|
||jd
�}|j�S)N)�msg� digestmod)r�newr�digest)r r r �macrrrr7s

zHMACAlgorithm.get_signature)
N) rrrr�staticmethod�hashlib�sha1r�_t�Anyr rrrrrrr)s
r)� secret_keyrc

Cs&t|t
tf�rt|�
g
Sd
d�|D�
S)Nc
Ssg|]}
t|
�
�qSr)
r)�.0�
srrr� @sz#_make_keys_list..)� isinstance�strrr)
r+rrr�_make_keys_list<s

r1c@s�eZ
dZUd
Zeej�
Zej dZ e dee eejeejej ejed�dd�Zeed �
d d��
Zde ed�d d�Zeed�dd�Zeed�dd�Zeeed�dd�Zeed�dd�Zeed�dd�ZdS)�Signera�A signer securely signs bytes, then unsigns them to verify that the value hasn't been changed. The secret key should be a random string of ``bytes`` and should not be saved to code or version control. Different salts should be used to distinguish signing in different contexts. See :doc:`/concepts` for information about the security of the secret key and salt. :param secret_key: The secret key to sign and verify with. Can be a list of keys, oldest to newest, to support key rotation. :param salt: Extra key to combine with ``secret_key`` to distinguish signatures in different contexts. :param sep: Separator between the signature and value. :param key_derivation: How to derive the signing key from the secret key and salt. Possible values are ``concat``, ``django-concat``, or ``hmac``. Defaults to :attr:`default_key_derivation`, which defaults to ``django-concat``. :param digest_method: Hash function to use when generating the HMAC signature. Defaults to :attr:`default_digest_method`, which defaults to :func:`hashlib.sha1`. Note that the security of the hash alone doesn't apply when used intermediately in HMAC. :param algorithm: A :class:`SigningAlgorithm` instance to use instead of building a default :class:`HMACAlgorithm` with the ``digest_method``. .. versionchanged:: 2.0 Added support for key rotation by passing a list to ``secret_key``. .. versionchanged:: 0.18 ``algorithm`` was added as an argument to the class constructor. .. versionchanged:: 0.14 ``key_derivation`` and ``digest_method`` were added as arguments to the class constructor. z django-concat�itsdangerous.Signer�
.N)r+�salt�sep�key_derivationr� algorithmcCs�t|
�
|_
t|�
|_|jtkr&td
�
�
|dk r8t|�
}nd}||_|dkrP|j}||_|dkrd|j }||_ |dkr|t|j �
}||_dS)Nz�The given separator cannot be used because it may be contained in the signature itself. ASCII letters, digits, and '-_=' must not be used.sitsdangerous.Signer) r1�secret_keysrr6r� ValueErrorr5�default_key_derivationr7rrrr8)r r+r5r6r7rr8rrrr xs$






zSigner.__init__)
rc

Cs |jdS)z�The newest (last) entry in the :attr:`secret_keys` list. This is for compatibility from before key rotation support was added. r�����)
r9)
r rrrr+�szSigner.secret_key)r+rcCs�|
d
kr|jd }
nt
|
�
}
|jdkrBtjt|j|j|
�
j��S|jdkrltjt|j|jd|
�
j��S|jdkr�t j |
|jd�}|j|j�

|j�S|jdkr�|
Std �
�
d
S)a�
This method is called to derive the key. The default key derivation choices can be overridden here. Key derivation is not intended to be used as a security method to make a complex key out of a short password. Instead you should use large random secret keys. :param secret_key: A specific secret key to derive from. Defaults to the last item in :attr:`secret_keys`. .. versionchanged:: 2.0 Added the ``secret_key`` parameter. Nr�concatz django-concatssignerr)
r"�nonezUnknown key derivation methodr<) r9rr7r)�castrrr5r$rr#�update� TypeError)r r+r%rrr� derive_key�s 









zSigner.derive_key)r rcCs&t|
�
}
|j
�}|jj||
�}t|�
S)
z*Returns the signature for the given value.)rrBr8rr)r r r rrrrr�s


zSigner.get_signaturecCst|
�
}
|
|j
|j|
�
S)
zSigns the given string.)rr6r)r r rrr�sign�s
zSigner.sign)r rrc Cs`yt|�
}Wnt
k r


d
SXt|
�
}
x0t|j�
D]"}|j|�
}|jj||
|�r6dSq6Wd
S)z+Verifies the signature for the given value.FT)r� Exceptionr�reversedr9rBr8r)r r rr+r rrrr�s




zSigner.verify_signature)�signed_valuercCs^t|
�
}
|j
|
kr$td
|j
�d��
�
|
j|j
d�\}}|j||�rF|Std|�d�|d��
dS)zUnsigns the given string.zNo z found in valuerz Signature z does not match)
�payloadN)rr6r�rsplitr)r rFr rrrr�unsign�s

z Signer.unsigncCs(y|j|
�

d
St
k r"


dSXdS)znOnly validates the given signed value. Returns ``True`` if the signature exists and is valid. TFN)rIr)r rFrrr�validate�s 



zSigner.validate)r3r4NNN)
N)rrrrr&r'r(rr)r*r;r0� _t_secret_key�_t_opt_str_bytes�_t_str_bytes�Optionalrr �propertyrr+rBrrCrrrIrJrrrrr2Cs $



.'
!r2)r'rZtypingr)�encodingrrrr�excr�Unionr0rrMrNrL�IterablerKrrrZListr1r2rrrr�
s