File: //opt/alt/python37/lib/python3.7/site-packages/jwt/__pycache__/api_jwt.cpython-37.opt-1.pyc
B
�b�[� � @ s� d dl Z d dlZd dlmZ d dlmZmZ y d dlmZmZm Z m
Z
m Z W n e k
r` Y nX ddl
mZ ddlmZmZ ddlmZmZmZ dd lmZmZmZmZmZm Z m Z dd
l m Z G d d � d e�Z e � Z!e!j"Z"e!j#Z#e!j$Z$e!j%Z%e!j&Z&dS )
� N)�timegm)�datetime� timedelta)�Callable�Dict�List�Optional�Union� )�PyJWS)� Algorithm�get_default_algorithms)�Iterable�Mapping� string_types)� DecodeError�ExpiredSignatureError�ImmatureSignatureError�InvalidAudienceError�InvalidIssuedAtError�InvalidIssuerError�MissingRequiredClaimError)�
merge_dictc sv e Zd ZdZedd� �Zd� fdd� Zd � fd
d � Zd d
d�Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Z� ZS ) �PyJWTZJWTc
C s dddddddddd� S )NTF) �verify_signature�
verify_exp�
verify_nbf�
verify_iat�
verify_aud�
verify_iss� require_exp� require_iat� require_nbf� r# r# r# �</opt/alt/python37/lib/python3.7/site-packages/jwt/api_jwt.py�_get_default_options s zPyJWT._get_default_options�HS256Nc sr t |t�std��x0dD ](}t |�|�t�rt|| �� �||< qW tj|d|d�� d�}t
t | �� |||||�S )NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.)�exp�iat�nbf)�,�:)Z
separators�clszutf-8) �
isinstancer � TypeError�getr r � utctimetuple�json�dumps�encode�superr )�self�payload�key� algorithmZheadersZ json_encoderZ
time_claimZ json_payload)� __class__r# r$ r3 ( s
z PyJWT.encode� Tc
s� |r|st �dt� | �|�\}}}}|d kr8d|i}n |�d|� tt| �j|f|||d�|��} yt� | �d��}W n. t
k
r� }
zt d|
��W d d }
~
X Y nX t |t
�s�t d��|r�t| j|�} | j|| f|� |S )Nz�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.r )r7 �
algorithms�optionszutf-8zInvalid payload string: %sz-Invalid payload string: must be a json object)�warnings�warn�DeprecationWarning�_load�
setdefaultr4 r �decoder1 �loads�
ValueErrorr r- r r r< �_validate_claims) r5 Zjwtr7 Zverifyr; r< �kwargsr6 �_Zdecoded�eZmerged_options)r9 r# r$ rB D s(
z PyJWT.decoder c K s� d|kr$|� dd�|d< t�dt� t|t�r6|�� }t|ttd �t f�sRt
d��| � ||� t t
�� �� �}d|kr�|� d�r�| �|||� d|kr�|� d �r�| �|||� d
|kr�|� d�r�| �|||� |� d �r�| �||� |� d �r�| �||� d S )
NZverify_expirationTr zXThe verify_expiration parameter is deprecated. Please use verify_exp in options instead.z,audience must be a string, iterable, or Noner( r r) r r' r r )r/ r= r> r? r- r Z
total_secondsr �typer r. �_validate_required_claimsr r Zutcnowr0 �
_validate_iat�
_validate_nbf�
_validate_exp�
_validate_iss�
_validate_aud)r5 r6 r< �audience�issuer�leewayrF �nowr# r# r$ rE l s(
zPyJWT._validate_claimsc C sd |� d�r |� d�d kr td��|� d�r@|� d�d kr@td��|� d�r`|� d�d kr`td��d S )Nr r' r! r( r" r) )r/ r )r5 r6 r< r# r# r$ rJ � s z PyJWT._validate_required_claimsc C s2 yt |d � W n tk
r, td��Y nX d S )Nr( z)Issued At claim (iat) must be an integer.)�intrD r )r5 r6 rS rR r# r# r$ rK � s zPyJWT._validate_iatc C sF yt |d �}W n tk
r, td��Y nX ||| krBtd��d S )Nr) z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rT rD r r )r5 r6 rS rR r) r# r# r$ rL � s zPyJWT._validate_nbfc C sF yt |d �}W n tk
r, td��Y nX ||| k rBtd��d S )Nr' z/Expiration Time claim (exp) must be an integer.zSignature has expired)rT rD r r )r5 r6 rS rR r' r# r# r$ rM � s zPyJWT._validate_expc s� |d krd|krd S |d k r,d|kr,t d��|d krDd|krDtd��|d � t� t�r\� g� t� t�sntd��tdd� � D ��r�td��t|t�r�|g}t� fdd�|D ��s�td��d S )N�audzInvalid audiencez Invalid claim format in tokenc s s | ]}t |t� V qd S )N)r- r )�.0�cr# r# r$ � <genexpr>� s z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s | ]}|� kV qd S )Nr# )rV rU )�audience_claimsr# r$ rX � s )r r r- r �list�any)r5 r6 rP r# )rY r$ rO � s"
zPyJWT._validate_audc C s4 |d kr d S d|kr t d��|d |kr0td��d S )NZisszInvalid issuer)r r )r5 r6 rQ r# r# r$ rN � s zPyJWT._validate_iss)r& NN)r: TNN)NNr )�__name__�
__module__� __qualname__Z header_type� staticmethodr% r3 rB rE rJ rK rL rM rO rN �
__classcell__r# r# )r9 r$ r s" #
!
r )'r1 r= Zcalendarr r r �typingr r r r r � ImportErrorZapi_jwsr r; r r
�compatr r r �
exceptionsr r r r r r r Zutilsr r Z_jwt_global_objr3 rB Zregister_algorithmZunregister_algorithmZget_unverified_headerr# r# r# r$ �<module> s( $ D