3
�k�Z� � @ s� d dl Z d dlZd dlmZ d dlmZmZ d dlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ dd lmZmZmZmZmZmZmZ dd
lmZ G d d � d e
�Ze� Zej Z ej Z ej Z ej Z ej Z dS )
� N)�timegm)�Iterable�Mapping)�datetime� timedelta� )�PyJWS)� Algorithm�get_default_algorithms)� string_types)� DecodeError�ExpiredSignatureError�ImmatureSignatureError�InvalidAudienceError�InvalidIssuedAtError�InvalidIssuerError�MissingRequiredClaimError)�
merge_dictc sv e Zd ZdZedd� �Zd� fdd� Zd � fd
d � Zd d
d�Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dd� Z� ZS ) �PyJWTZJWTc
C s dddddddddd� S )NTF) �verify_signature�
verify_exp�
verify_nbf�
verify_iat�
verify_aud�
verify_iss� require_exp� require_iat� require_nbf� r r r � /usr/lib/python3.6/api_jwt.py�_get_default_options s zPyJWT._get_default_options�HS256Nc sr t |t�std��x0d D ](}t |j|�t�rt|| j� �||< qW tj|d
|d�j d�}t
t | �j |||||�S ) NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.�exp�iat�nbf�,�:)Z
separators�clszutf-8)r" r# r$ )r% r& ) �
isinstancer � TypeError�getr r � utctimetuple�json�dumps�encode�superr )�self�payload�key� algorithmZheadersZ json_encoderZ
time_claimZ json_payload)� __class__r r r. # s
z PyJWT.encode� Tc s� |r| rt jd
t� | j|�\}}} }
|d kr:d|i}n |jd|� tt| �j|f|||d�|��} ytj | jd��}W n. t
k
r� } zt d| ��W Y d d } ~ X nX t |t
�s�t d��|r�t| j|�}
| j||
f|� |S ) Nz.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.r )r2 �
algorithms�optionszutf-8zInvalid payload string: %sz-Invalid payload string: must be a json objectziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). z�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)�warnings�warn�DeprecationWarning�_load�
setdefaultr/ r �decoder, �loads�
ValueErrorr r( r r r7 �_validate_claims)r0 Zjwtr2 Zverifyr6 r7 �kwargsr1 Z
signing_input�headerZ signatureZdecoded�eZmerged_options)r4 r r r= : s*
z PyJWT.decoder c K s� d|kr$|j dd�|d< tjdt� t|t�r6|j� }t|ttd �t f�sRt
d��| j ||� t t
j� j� �}d|kr�|j d�r�| j|||� d|kr�|j d �r�| j|||� d
|kr�|j d�r�| j|||� |j d �r�| j||� |j d �r�| j||� d S )
NZverify_expirationTr zXThe verify_expiration parameter is deprecated. Please use verify_exp in options instead.z,audience must be a string, iterable, or Noner# r r$ r r" r r )r* r8 r9 r: r( r Z
total_secondsr �typer r) �_validate_required_claimsr r Zutcnowr+ �
_validate_iat�
_validate_nbf�
_validate_exp�
_validate_iss�
_validate_aud)r0 r1 r7 �audience�issuer�leewayrA �nowr r r r@ ] s(
zPyJWT._validate_claimsc C sd |j d�r |j d�d kr td��|j d�r@|j d�d kr@td��|j d�r`|j d�d kr`td��d S )Nr r" r r# r r$ )r* r )r0 r1 r7 r r r rE s z PyJWT._validate_required_claimsc C s2 yt |d � W n tk
r, td��Y nX d S )Nr# z)Issued At claim (iat) must be an integer.)�intr? r )r0 r1 rN rM r r r rF � s zPyJWT._validate_iatc C sF yt |d �}W n tk
r, td��Y nX ||| krBtd��d S )Nr$ z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rO r? r r )r0 r1 rN rM r$ r r r rG � s zPyJWT._validate_nbfc C sF yt |d �}W n tk
r, td��Y nX ||| k rBtd��d S )Nr" z/Expiration Time claim (exp) must be an integer.zSignature has expired)rO r? r r
)r0 r1 rN rM r" r r r rH � s zPyJWT._validate_expc s� |d krd|krd S |d k r,d|kr,t d��|d krDd|krDtd��|d � t� t�r\� g� t� t�sntd��tdd� � D ��r�td��t|t�r�|g}t� fdd�|D ��s�td��d S )N�audzInvalid audiencez Invalid claim format in tokenc s s | ]}t |t� V qd S )N)r( r )�.0�cr r r � <genexpr>� s z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s | ]}|� kV qd S )Nr )rQ rP )�audience_claimsr r rS � s )r r r( r �list�any)r0 r1 rK r )rT r rJ � s"
zPyJWT._validate_audc C s4 |d kr d S d|kr t d��|d |kr0td��d S )NZisszInvalid issuer)r r )r0 r1 rL r r r rI � s zPyJWT._validate_iss)r! NN)r5 TNN)NNr )�__name__�
__module__� __qualname__Z header_type� staticmethodr r. r= r@ rE rF rG rH rJ rI �
__classcell__r r )r4 r r s #
!
r )!r, r8 Zcalendarr � collectionsr r r r Zapi_jwsr r6 r r
�compatr �
exceptionsr r
r r r r r Zutilsr r Z_jwt_global_objr. r= Zregister_algorithmZunregister_algorithmZget_unverified_headerr r r r �<module> s" $ 9