| Server IP : 209.38.156.173 / Your IP : 216.73.216.122 [ Web Server : Apache/2.4.52 (Ubuntu) System : Linux lakekumayuhotel 5.15.0-136-generic #147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x86_64 User : root ( 0) PHP Version : 8.1.2-1ubuntu2.22 Disable Function : NONE Domains : 2 Domains MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/josepy/__pycache__/ |
Upload File : |
o
h9Ra�< � @ s� d Z ddlZddlZddlZddlmZmZmZmZm Z m
Z
m Z m Z m
Z
ddlmZ ddlZddlmZmZmZmZmZmZ G dd� d�ZG dd � d ej�ZG d
d � d ej�ZG d d
� d
ej�Z G dd� d�Z e dkrse e � � � dS dS )zJSON Web Signature.� N) �Dict�Any�Optional� FrozenSet�Mapping�List�Type�Tuple�cast)�crypto)�b64�errors� json_util�jwa�jwk�utilc @ sB e Zd ZdZdZ ededefdd��Zededefdd��Zd S )
� MediaTypez MediaType field encoder/decoder.z application/�value�returnc C s( d|vrd|v r
t �d��| j| S |S )zDecoder.�/�;zUnexpected semi-colon)r
�DeserializationError�PREFIX��clsr � r �,/usr/lib/python3/dist-packages/josepy/jws.py�decode s
zMediaType.decodec C s. d|vr|� | j�s J �|t| j�d� S |S )zEncoder.r N)�
startswithr �lenr r r r �encode s zMediaType.encodeN) �__name__�
__module__� __qualname__�__doc__r � classmethod�strr r r r r r r
s r c @ s� e Zd ZU dZejdejjdd�Z eje
d< ejddd�Z e e
d< ejde
jjdd�Ze
je
d< ejddd�Ze e
d< ejd dd�Ze e
d < ejd
dd d �Zeejd
f e
d
< ejdejdd�Ze e
d< ejdejdd�Ze e
d< ejdejejdd�Z ee
d< ejdejejdd�Z ee
d< ejddd d �Z ee d
f e
d< e e!ej"f e
d< de e!ej"f fdd�Z#de dd fdd�Z$de%jfd d �Z&e j'd e de fd d ��Z ej(d!d"� �Zej'd#d"� �Zd$S )%�Headera6 JOSE Header.
.. warning:: This class supports **only** Registered Header
Parameter Names (as defined in section 4.1 of the
protocol). If you need Public Header Parameter Names (4.2)
or Private Header Parameter Names (4.3), you must subclass
and override :meth:`from_json` and :meth:`to_partial_json`
appropriately.
.. warning:: This class does not support any extensions through
the "crit" (Critical) Header Parameter (4.1.11) and as a
conforming implementation, :meth:`from_json` treats its
occurrence as an error. Please subclass if you seek for
a different behaviour.
:ivar x5tS256: "x5t#S256"
:ivar str typ: MIME Media Type, inc. :const:`MediaType.PREFIX`.
:ivar str cty: Content-Type, inc. :const:`MediaType.PREFIX`.
�algT)�decoder� omitempty�jku)r* r �kid�x5u�x5cr �r* �default.�x5tzx5t#S256�x5tS256�typ)�encoderr) r* �cty�crit�_fieldsr c s � fdd�� j �� D �S )z4Fields that would not be omitted in the JSON object.c s, i | ]\}}|� t� |��s|t� |��qS r )�omit�getattr)�.0�name�field��selfr r �
<dictcomp>P s �z&Header.not_omitted.<locals>.<dictcomp>)r7 �itemsr= r r= r � not_omittedN s
�zHeader.not_omitted�otherc C sb t |t| ��std�t|����| �� }|�� }t|��|�r#td��|�|� t| �di |��S )Nz Header cannot be added to: {0}z+Addition of overlapping headers not definedr )�
isinstance�type� TypeError�formatrA �set� intersection�update)r> rB �not_omitted_self�not_omitted_otherr r r �__add__T s �
zHeader.__add__c C s | j du r
t�d��| j S )z�Find key based on header.
.. todo:: Supports only "jwk" header parameter lookup.
:returns: (Public) key found in the header.
:rtype: .JWK
:raises josepy.errors.Error: if key could not be found
Nz No key found)r r
�Errorr= r r r �find_keyb s
zHeader.find_key� unused_valuec C s
t �d��)Nz("crit" is not supported, please subclass)r
r )rO r r r r6 q s �z Header.critc C s dd� | D �S )Nc S s" g | ]
}t �t�tj|j���qS r )�base64� b64encoder �dump_certificate�
FILETYPE_ASN1�wrapped�r: �certr r r �
<listcomp>{ s
�
�z Header.x5c.<locals>.<listcomp>r �r r r r r. y s �z
Header.x5cc
C s: z
t dd� | D ��W S tjy } zt�|��d }~ww )Nc s s* � | ]}t �t�tjt�|���V qd S �N)r �ComparableX509r �load_certificaterS rP � b64decoderU r r r � <genexpr>� s � ��z Header.x5c.<locals>.<genexpr>)�tupler rM r
r )r �errorr r r r. ~ s
�
��N))r! r" r# r$ r r< r � JWASignature� from_jsonr( �__annotations__r+ �bytes�jwk_mod�JWKr r, r- r. r r rZ �decode_b64joser1 r2 r r r r3 r5 r6 r r r& �FieldrA rL �josepyrN r) r4 r r r r r' ' sB
� "��
�
�
r' c s� e Zd ZU dZeZeed< dZej dddd�Z
e ed< ej dde� ej d �Z
eed< ej d
ejejd �Zeed
< e
jd e d
e fdd��Z
e
jd e d
e fdd��Z
ded
df� fdd� Zeded
ee ef fdd��Zede ded
efdd��Zd'dedeej d
e fdd �Z ede � fdedej d ej d e d e!ded
d fd d!��Z"d
ee ef f� fd"d#� Z#ed$e$e ef d
ee ef f� fd%d&� �Z%� Z&S )(� Signaturea JWS Signature.
:ivar combined: Combined Header (protected and unprotected,
:class:`Header`).
:ivar unicode protected: JWS protected header (Jose Base-64 decoded).
:ivar header: JWS Unprotected Header (:class:`Header`).
:ivar str signature: The signature.
�combined)rj � protectedT� r/ �header)r* r0 r) � signature)r) r4 r r c C s t �| �d��S �N�utf-8)r �encode_b64joser rX r r r rk � s zSignature.protectedc C s t �| ��d�S ro )r rf r rX r r r rk � s �kwargsNc s8 d|vr | � |�}t� jdi |�� | jjd usJ �d S )Nrj r )�_with_combined�super�__init__rj r( )r> rr �� __class__r r ru � s
zSignature.__init__c C sZ d|vsJ �|� d| jd j�}|� d| jd j�}|r%|| j�|� }n|}||d< |S )Nrj rm rk )�getr7 r0 �
header_cls�
json_loads)r rr rm rk rj r r r rs � s zSignature._with_combined�payloadc C s t �|�d��d t �|� S )Nrp � .)r rQ r )r rk r{ r r r �_msg� s �zSignature._msg�keyc C s8 |du r | j �� n|}| j jj|j| j| �| j|�d�S )zvVerify.
:param bytes payload: Payload to verify.
:param JWK key: Key used for verification.
N)r~ �sig�msg)rj rN r( �verifyr~ rn r} rk )r> r{ r~ �
actual_keyr r r r� � s
�zSignature.verifyr( � include_jwk�protectc K s� t ||j�sJ �|}||d< |r|�� |d< t|��| jj�s!J �|�| jj�s*J �i }|D ]
} | |v r;|�| �|| < q.|rI| jdi |���� }
nd}
| jdi |��} |� |j
| � |
|��} | |
| | d�S )aD Sign.
:param bytes payload: Payload to sign.
:param JWK key: Key for signature.
:param JWASignature alg: Signature algorithm to use to sign.
:param bool include_jwk: If True, insert the JWK inside the signature headers.
:param FrozenSet protect: List of headers to protect.
r( r rl )rk rm rn Nr ) rC �kty�
public_keyrG �issubsetry r7 �pop�
json_dumps�signr~ r} ) r r{ r~ r( r� r� rr �
header_params�protected_paramsrm rk rn r r r r� � s$
�zSignature.signc s t � �� }|d �� s|d= |S )Nrm )rt �fields_to_partial_jsonrA )r> �fieldsrv r r r� � s
z Signature.fields_to_partial_json�jobjc s4 t � �|�}| �|�}d|d �� vrt�d��|S )Nr( rj zalg not present)rt �fields_from_jsonrs rA r
r )r r� r� �fields_with_combinedrv r r r� � s
zSignature.fields_from_jsonrY )'r! r" r# r$ r' ry rb � __slots__r r< rk r& ra rm rf rq rn rc r4 r) r ru r% r rs r} r rh re �boolr� � frozensetr` r r� r� r r� �
__classcell__r r rv r ri � sL
��
���� �%0ri c @ s� e Zd ZU dZdZeed< ee ed< eZ dde
e j de
fdd �Zeded
edd fd d ��Zedefd
d��Zdefdd�Zededd fdd��Zd de
deeef fdd�Zedeeef dd fdd��ZdS ) �JWSzgJSON Web Signature.
:ivar str payload: JWS Payload.
:ivar str signature: JWS Signatures.
�r{ �
signaturesr{ r� Nr~ r c s t � �fdd��jD ��S )�Verify.c 3 s � | ]
}|� �j� �V qd S rY )r� r{ �r: r �r~ r> r r r] s � z JWS.verify.<locals>.<genexpr>)�allr� )r> r~ r r� r r� s z
JWS.verifyrr c K s | || j jdd|i|��fd�S )�Sign.r{ r� Nr )�
signature_clsr� )r r{ rr r r r r� s �zJWS.signc C s t | j�dks J �| jd S )zPGet a singleton signature.
:rtype: :class:`JWS.signature_cls`
� r )r r� r= r r r rn s
z
JWS.signaturec C s\ t | j�dks J �d| jj�� vsJ �t�| jj�d��d t�| j � d t�| jj� S )z7Compact serialization.
:rtype: bytes
r� r( rp r| )
r r� rn rm rA r rQ rk r r{ r= r r r �
to_compact" s �
�� ��zJWS.to_compact�compactc C sb z
|� d�\}}}W n ty t�d��w | jt�|��d�t�|�d�}| t�|�|fd�S )zACompact deserialization.
:param bytes compact:
r| zOCompact JWS serialization should comprise of exactly 3 dot-separated componentsrp )rk rn r� )�split�
ValueErrorr
r r� r r\ r )r r� rk r{ rn r r r r � from_compact4 s ���zJWS.from_compactT�flatc C sN | j sJ �t�| j�}|r!t| j �dkr!| j d �� }||d< |S || j d�S )Nr� r r{ r� )r� r rq r{ r �to_partial_json)r> r� r{ �retr r r r� G s
�zJWS.to_partial_jsonr� c sp d|v r
d|v r
t �d��d|v r"� t�|�d��� j�|�fd�S � t�|d �t� fdd�|d D ��d�S )Nrn r� zFlat mixed with non-flatr{ r� c 3 s � | ] }� j �|�V qd S rY )r� ra r� �r r r r] ^ s � �z JWS.from_json.<locals>.<genexpr>)r
r r rf r� r� ra r^ )r r� r r� r ra U s
� ��z
JWS.from_jsonrY )T)r! r" r# r$ r� rc rb r ri r� r rh re r� r� r% r r� �propertyrn r� r� r r& r� ra r r r r r� s"
r� c @ s� e Zd ZdZedejddfdd��Zedejdefdd��Z ed e
de j fd
d ��Z
ed e
de
fd d
��Zed e
deej fdd��Zeddee dee fdd��ZdS )�CLIzJWS CLI.�argsr Nc C s� |j j�|j�� �}|j�� |jdu rg |_|jr |j�d� t j
t j �� �
� ||j t|j�d�}|jr@t|�� �d�� dS t|�� � dS )r� Nr( )r{ r~ r( r� rp )r( r� �loadr~ �read�closer� r� �appendr� r� �sys�stdinr rG �printr� r �json_dumps_pretty)r r� r~ r r r r r� e s
�zCLI.signc
C s� |j rt�tj�� �� �}n&z
ttt�tj�� ��}W n t j
y3 } z t |� W Y d}~dS d}~ww |j durQ|j
dus@J �|j
�|j �� ��� }|j �� nd}tj�|j�� � |j|d� S )r� NF)r~ )r� r� r� r� r� r� r r
rz r
rM r� r~ r� r� r� r� �stdout�writer{ r r� )r r� r r_ r~ r r r r� w s ��
z
CLI.verify�argc C s t j�|�S rY )r r` ra �r r� r r r � _alg_type� s z
CLI._alg_typec C s |t jjv sJ �|S rY )ri ry r7 r� r r r � _header_type� s zCLI._header_typec C s |t jjv sJ �t jj| S rY )rd re �TYPESr� r r r � _kty_type� s z
CLI._kty_typec C s� |du r t jdd� }t�� }|jddd� |�� }|�d�}|j| jd� |jdd t� d
�d d � |jd
d| j
t j d� |jddd| j
d� |�d�}|j| jd� |jdd t� d
�dd � |jd| jdd � |�|�}|�|�S )z Parse arguments and sign/verify.Nr� z --compact�
store_true)�actionr� )�funcz-kz--key�rbT)rD �requiredz-az--alg)rD r0 z-pz --protectr� )r� rD r� Fz--kty)r� �argv�argparse�ArgumentParser� add_argument�add_subparsers�
add_parser� set_defaultsr� �FileTyper� r �RS256r� r� r� �
parse_argsr� )r r� �parser�
subparsers� parser_sign�
parser_verify�parsedr r r �run� s4
� �
�
��
zCLI.runrY )r! r" r# r$ r% r� � Namespacer� r� r� r r r` r� r� r rd re r� r r& r r� r r r r r� b s "r� �__main__)!r$ r� rP r� �typingr r r r r r r r r
�OpenSSLr rh r r
r r r rd r r �JSONObjectWithFieldsr' ri r� r� r! �exitr� r r r r �<module> s , ayaV�