3
�}:aY7 � @ s� d Z ddlZddlZddlZddlZddlmZmZmZm Z m
Z
m Z G dd� d�Z G dd� dej
�ZG dd � d ej
�ZG d
d � d ej
�ZG d d
� d
�Zedkr�eej� � dS )zJSON Web Signature.� N)�b64�errors� json_util�jwa�jwk�utilc @ s, e Zd ZdZdZedd� �Zedd� �ZdS )� MediaTypez MediaType field encoder/decoder.z application/c C s( d|kr$d|krt jd��| j| S |S )zDecoder.�/�;zUnexpected semi-colon)r �DeserializationError�PREFIX)�cls�value� r �/usr/lib/python3.6/jws.py�decode s
zMediaType.decodec C s d|kr|t | j�d� S |S )zEncoder.r
N)�lenr )r
r r r r �encode s zMediaType.encodeN)�__name__�
__module__� __qualname__�__doc__r � classmethodr r r r r r r s
r c @ s e Zd ZdZejdejjdd�Z ejddd�Z
ejde j jdd�Z ejddd�Z
ejd dd�Zejd
df d �Zejd ejdd�Zejd
ejdd�Zejdejejdd�Zejdejejdd�Zejddf d �Zdd� Zdd� Zdd� Zej dd� �Zej dd� �Zej d d� �Zd S ) �Headera6 JOSE Header.
.. warning:: This class supports **only** Registered Header
Parameter Names (as defined in section 4.1 of the
protocol). If you need Public Header Parameter Names (4.2)
or Private Header Parameter Names (4.3), you must subclass
and override :meth:`from_json` and :meth:`to_partial_json`
appropriately.
.. warning:: This class does not support any extensions through
the "crit" (Critical) Header Parameter (4.1.11) and as a
conforming implementation, :meth:`from_json` treats its
occurrence as an error. Please subclass if you seek for
a different behaviour.
:ivar x5tS256: "x5t#S256"
:ivar str typ: MIME Media Type, inc. :const:`MediaType.PREFIX`.
:ivar str cty: Content-Type, inc. :const:`MediaType.PREFIX`.
�algT)�decoder� omitempty�jku)r r �kid�x5u�x5c)r �default�x5tzx5t#S256�typ)�encoderr r �cty�critc s � fdd�� j j� D �S )z4Fields that would not be omitted in the JSON object.c s, i | ]$\}}|j t� |��st� |�|�qS r )Zomit�getattr)�.0�nameZfield)�selfr r �
<dictcomp>M s z&Header.not_omitted.<locals>.<dictcomp>)�_fields�items)r* r )r* r � not_omittedK s
zHeader.not_omittedc C s^ t |t| ��s tdjt|����| j� }|j� }t|�j|�rFtd��|j|� t| �f |�S )Nz Header cannot be added to: {0}z+Addition of overlapping headers not defined)�
isinstance�type� TypeError�formatr. �set� intersection�update)r* �otherZnot_omitted_selfZnot_omitted_otherr r r �__add__Q s
zHeader.__add__c C s | j dkrtjd��| j S )z�Find key based on header.
.. todo:: Supports only "jwk" header parameter lookup.
:returns: (Public) key found in the header.
:rtype: .JWK
:raises josepy.errors.Error: if key could not be found
Nz No key found)r r �Error)r* r r r �find_key_ s
zHeader.find_keyc C s t jd��d S )Nz("crit" is not supported, please subclass)r r )Z unused_valuer r r r& n s z Header.critc C s dd� | D �S )Nc S s& g | ] }t jtjjtjj|j���qS r )�base64� b64encode�OpenSSL�cryptoZdump_certificate�
FILETYPE_ASN1�wrapped)r( �certr r r �
<listcomp>x s z Header.x5c.<locals>.<listcomp>r )r r r r r v s z
Header.x5cc C sH yt dd� | D ��S tjjk
rB } ztj|��W Y d d }~X nX d S )Nc s s, | ]$}t jtjjtjjtj|���V qd S )N)r ZComparableX509r< r= Zload_certificater> r: � b64decode)r( r@ r r r � <genexpr>~ s z Header.x5c.<locals>.<genexpr>)�tupler< r= r8 r r )r �errorr r r r { s
N) r r r r r �Fieldr � JWASignature� from_jsonr r r �JWKr r r �decode_b64joser" Zx5tS256r r r r# r% r& r. r7 r9 r r$ r r r r r % s.
r c s� e Zd ZdZeZd Zejdddd�Z ejdde� ej
d�Z ejd ej ej
d
�Ze jd d � �Z e jd
d � �Z � fdd�Zedd� �Zedd� �Zd dd�Zede� fdd��Z� fdd�Ze� fdd ��Z� ZS ) � Signaturea JWS Signature.
:ivar combined: Combined Header (protected and unprotected,
:class:`Header`).
:ivar unicode protected: JWS protected header (Jose Base-64 decoded).
:ivar header: JWS Unprotected Header (:class:`Header`).
:ivar str signature: The signature.
�combined� protectedT� )r r! �header)r r! r � signature)r r$ c C s t j| jd��S )Nzutf-8)r �encode_b64joser )r r r r rM � s zSignature.protectedc C s t j| �jd�S )Nzutf-8)r rJ r )r r r r rM � s c s$ d|kr| j |�}t� jf |� d S )NrL )�_with_combined�super�__init__)r* �kwargs)� __class__r r rT � s
zSignature.__init__c C sN |j d| jd j�}|j d| jd j�}|r>|| jj|� }n|}||d< |S )NrO rM rL )�getr, r! �
header_cls�
json_loads)r
rU rO rM rL r r r rR � s zSignature._with_combinedc C s t j|jd��d t j|� S )Nzutf-8� .)r r; r )r
rM �payloadr r r �_msg� s zSignature._msgNc C s8 |dkr| j j� n|}| j jj|j| j| j| j|�d�S )zEVerify.
:param JWK key: Key used for verification.
N)�key�sig�msg)rL r9 r �verifyr] rP r\ rM )r* r[ r] r r r r` � s zSignature.verifyc K s� |}||d< |r |j � |d< i }x"|D ]} | |kr&|j| �|| < q&W |rZ| jf |�j� }
nd}
| jf |�} |j|j| j|
|��} | |
| | d�S )z;Sign.
:param JWK key: Key for signature.
r r rN )rM rO rP )�
public_key�poprX Z
json_dumps�signr] r\ ) r
r[ r] r Z include_jwk�protectrU Z
header_paramsZprotected_paramsrO rM rP r r r rc � s
zSignature.signc s t � j� }|d j� s |d= |S )NrO )rS �fields_to_partial_jsonr. )r* �fields)rV r r re � s
z Signature.fields_to_partial_jsonc s4 t � j|�}| j|�}d|d j� kr0tjd��|S )Nr rL zalg not present)rS �fields_from_jsonrR r. r r )r
�jobjrf Zfields_with_combined)rV r r rg � s
zSignature.fields_from_json)rL )N)r r r r r rX � __slots__r rF rM rH rO rJ rQ rP r$ r rT r rR r\ r` � frozensetrc re rg �
__classcell__r r )rV r rK � s*
rK c @ sd e Zd ZdZdZeZddd�Zedd� �Z e
d d
� �Z d d � Z ed
d� �Z
ddd�Zedd� �ZdS )�JWSzgJSON Web Signature.
:ivar str payload: JWS Payload.
:ivar str signature: JWS Signatures.
r[ �
signaturesNc s t � �fdd��jD ��S )zVerify.c 3 s | ]}|j �j� �V qd S )N)r` r[ )r( r^ )r] r* r r rC s z JWS.verify.<locals>.<genexpr>)�allrm )r* r] r )r] r* r r` s z
JWS.verifyc K s | || j jf d|i|��fd�S )zSign.r[ )r[ rm )�
signature_clsrc )r
r[ rU r r r rc s zJWS.signc C s
| j d S )zPGet a singleton signature.
:rtype: :class:`JWS.signature_cls`
r )rm )r* r r r rP s z
JWS.signaturec C s6 t j| jjjd��d t j| j� d t j| jj� S )z7Compact serialization.
:rtype: bytes
zutf-8rZ )r r; rP rM r r[ )r* r r r �
to_compact s &zJWS.to_compactc C sh y|j d�\}}}W n tk
r2 tjd��Y nX | jtj|�jd�tj|�d�}| tj|�|fd�S )zACompact deserialization.
:param bytes compact:
rZ zOCompact JWS serialization should comprise of exactly 3 dot-separated componentszutf-8)rM rP )r[ rm )�split�
ValueErrorr r ro r rB r )r
�compactrM r[ rP r^ r r r � from_compact( s zJWS.from_compactTc C sH t j| j�}|r8t| j�dkr8| jd j� }||d< |S || jd�S d S )N� r r[ )r[ rm )r rQ r[ r rm �to_partial_json)r* Zflatr[ �retr r r rv ; s zJWS.to_partial_jsonc sv d|kr d|kr t jd��nVd|krF� tj|jd��� jj|�fd�S � tj|d �t� fdd�|d D ��d�S d S )NrP rm zFlat mixed with non-flatr[ )r[ rm c 3 s | ]}� j j|�V qd S )N)ro rH )r( r^ )r
r r rC R s z JWS.from_json.<locals>.<genexpr>)r r r rJ rb ro rH rD )r
rh r )r
r rH I s z
JWS.from_json)r[ rm )N)T)r r r r ri rK ro r` r rc �propertyrP rp rt rv rH r r r r rl � s
rl c @ sZ e Zd ZdZedd� �Zedd� �Zedd� �Zedd � �Zed
d � �Z edd
d��Z
d S )�CLIzJWS CLI.c C s� |j jj|jj� �}|jj� |jdkr.g |_|jr@|jjd� t j
t j j� j
� ||j t|j�d�}|jr~t|j� jd�� n t|j� � dS )zSign.Nr )r[ r] r rd zutf-8)r �kty�loadr] �read�closerd rs �appendrl rc �sys�stdinr r3 �printrp r Zjson_dumps_pretty)r
�argsr] r^ r r r rc Y s
zCLI.signc C s� |j r tjtjj� j� �}n@ytjtjj� �}W n* tj k
rZ } z t
|� dS d}~X nX |j dk r�|j j
|j j� �j� }|j j� nd}tjj|j� |j|d� S )zVerify.ru N)r] ���)rs rl rt r r� r| r rY r r8 r� r] rz r{ ra r} �stdout�writer[ r` )r
r� r^ rE r] r r r r` k s
z
CLI.verifyc C s t jj|�S )N)r rG rH )r
�argr r r � _alg_type� s z
CLI._alg_typec C s |S )Nr )r
r� r r r � _header_type� s zCLI._header_typec C s t jj| S )N)r rI ZTYPES)r
r� r r r � _kty_type� s z
CLI._kty_typeNc C s� |dkrt jdd� }tj� }|jddd� |j� }|jd�}|j| jd� |jdd tj d
�d d � |jd
d| j
t j d� |jddd| j
d� |jd�}|j| jd� |jdd tj d
�dd � |jd| jdd � |j|�}|j|�S )z Parse arguments and sign/verify.Nru z --compact�
store_true)�actionrc )�funcz-kz--key�rbT)r0 Zrequiredz-az--alg)r0 r! z-pz --protectr~ )r� r0 r` Fz--kty)r �argv�argparse�ArgumentParser� add_argumentZadd_subparsersZ
add_parserZ set_defaultsrc ZFileTyper� r ZRS256r� r` r� �
parse_argsr� )r
r� �parserZ
subparsersZ parser_signZ
parser_verifyZparsedr r r �run� s*
zCLI.run)N) r r r r r rc r` r� r� r� r� r r r r ry V s ry �__main__)r r� r: r r< Zjosepyr r r r r r r ZJSONObjectWithFieldsr rK rl ry r �exitr� r r r r �<module> s `r_V