File: //proc/self/root/lib/python3/dist-packages/jwt/__pycache__/api_jwt.cpython-38.pyc
U
�b�[� � @ s� d dl Z d dlZd dlmZ d dlmZmZ z d dlmZmZm Z m
Z
m Z W n e k
r` Y nX ddl
mZ ddlmZmZ ddlmZmZmZ dd lmZmZmZmZmZm Z m Z dd
l m Z G d d � d e�Z e � Z!e!j"Z"e!j#Z#e!j$Z$e!j%Z%e!j&Z&dS )
� N)�timegm)�datetime� timedelta)�Callable�Dict�List�Optional�Union� )�PyJWS)� Algorithm�get_default_algorithms)�Iterable�Mapping� string_types)� DecodeError�ExpiredSignatureError�ImmatureSignatureError�InvalidAudienceError�InvalidIssuedAtError�InvalidIssuerError�MissingRequiredClaimError)�
merge_dictc sv e Zd ZdZedd� �Zd� fdd� Zd � fd
d � Zd d
d�Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Z� ZS ) �PyJWTZJWTc
C s dddddddddd� S )NTF) �verify_signature�
verify_exp�
verify_nbf�
verify_iat�
verify_aud�
verify_iss� require_exp� require_iat� require_nbf� r# r# r# �-/usr/lib/python3/dist-packages/jwt/api_jwt.py�_get_default_options s �zPyJWT._get_default_options�HS256Nc sn t |t�std��dD ](}t |�|�t�rt|| �� �||< qtj|d|d�� d�}t
t | �� |||||�S )NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.)�exp�iat�nbf)�,�:)Z
separators�cls�utf-8) �
isinstancer � TypeError�getr r � utctimetuple�json�dumps�encode�superr )�self�payload�key� algorithmZheadersZ json_encoderZ
time_claimZ json_payload�� __class__r# r$ r4 ( s&
��
�z PyJWT.encode� Tc
s� |r|st �dt� | �|�\}}}}|d kr8d|i}n |�d|� tt| �j|f|||d�|��} zt� | �d��}W n. t
k
r� }
zt d|
��W 5 d }
~
X Y nX t |t
�s�t d��|r�t| j|�} | j|| f|� |S )Nz�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.r )r8 �
algorithms�optionsr- zInvalid payload string: %sz-Invalid payload string: must be a json object)�warnings�warn�DeprecationWarning�_load�
setdefaultr5 r �decoder2 �loads�
ValueErrorr r. r r r> �_validate_claims) r6 Zjwtr8 Zverifyr= r> �kwargsr7 �_Zdecoded�eZmerged_optionsr: r# r$ rD D s8 �
� ��
z PyJWT.decoder c K s� d|kr$|� dd�|d< t�dt� t|t�r6|�� }t|ttd �t f�sRt
d��| � ||� t t
�� �� �}d|kr�|� d�r�| �|||� d|kr�|� d �r�| �|||� d
|kr�|� d�r�| �|||� |� d �r�| �||� |� d �r�| �||� d S )
NZverify_expirationTr zXThe verify_expiration parameter is deprecated. Please use verify_exp in options instead.z,audience must be a string, iterable, or Noner( r r) r r' r r )r0 r? r@ rA r. r Z
total_secondsr �typer r/ �_validate_required_claimsr r Zutcnowr1 �
_validate_iat�
_validate_nbf�
_validate_exp�
_validate_iss�
_validate_aud)r6 r7 r> �audience�issuer�leewayrH �nowr# r# r$ rG l s* �
zPyJWT._validate_claimsc C sd |� d�r |� d�d kr td��|� d�r@|� d�d kr@td��|� d�r`|� d�d kr`td��d S )Nr r' r! r( r" r) )r0 r )r6 r7 r> r# r# r$ rL � s z PyJWT._validate_required_claimsc C s2 zt |d � W n tk
r, td��Y nX d S )Nr( z)Issued At claim (iat) must be an integer.)�intrF r )r6 r7 rU rT r# r# r$ rM � s zPyJWT._validate_iatc C sF zt |d �}W n tk
r, td��Y nX ||| krBtd��d S )Nr) z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rV rF r r )r6 r7 rU rT r) r# r# r$ rN � s zPyJWT._validate_nbfc C sF zt |d �}W n tk
r, td��Y nX ||| k rBtd��d S )Nr' z/Expiration Time claim (exp) must be an integer.zSignature has expired)rV rF r r )r6 r7 rU rT r' r# r# r$ rO � s zPyJWT._validate_expc s� |d krd|krd S |d k r,d|kr,t d��|d krDd|krDtd��|d � t� t�r\� g� t� t�sntd��tdd� � D ��r�td��t|t�r�|g}t� fdd�|D ��s�td��d S )N�audzInvalid audiencez Invalid claim format in tokenc s s | ]}t |t� V qd S �N)r. r )�.0�cr# r# r$ � <genexpr>� s z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s | ]}|� kV qd S rX r# )rY rW �Zaudience_claimsr# r$ r[ � s )r r r. r �list�any)r6 r7 rR r# r\ r$ rQ � s"
zPyJWT._validate_audc C s4 |d kr d S d|kr t d��|d |kr0td��d S )NZisszInvalid issuer)r r )r6 r7 rS r# r# r$ rP � s zPyJWT._validate_iss)r& NN)r< TNN)NNr )�__name__�
__module__� __qualname__Z header_type� staticmethodr% r4 rD rG rL rM rN rO rQ rP �
__classcell__r# r# r: r$ r s*
� �( �
"
r )'r2 r? Zcalendarr r r �typingr r r r r � ImportErrorZapi_jwsr r= r r
�compatr r r �
exceptionsr r r r r r r Zutilsr r Z_jwt_global_objr4 rD Zregister_algorithmZunregister_algorithmZget_unverified_headerr# r# r# r$ �<module> s( $ D