Current File : //snap/core20/current/usr/lib/python3/dist-packages/jwt/__pycache__/algorithms.cpython-38.pyc
U
D�bX3 � @ s� d dl Z d dlZd dlZddlmZmZ ddlmZ ddlm Z m
Z
m Z m Z m
Z
mZmZmZmZmZ z�d dlmZ d dlmZmZmZ d dlmZmZm Z m Z m Z m Z m Z m!Z! d d l"m#Z#m$Z$ d d
l%m&Z&m'Z' d d l(m)Z) d d l*m+Z+ d
Z,W n e-k
�r dZ,Y nX e.ddddddddddg
�Z/dd� Z0G dd � d e1�Z2G d d � d e2�Z3G d d � d e2�Z4e,�r�G d!d"� d"e2�Z5G d#d$� d$e2�Z6G d%d&� d&e5�Z7dS )'� N� )�constant_time_compare� string_types��InvalidKeyError)
�base64url_decode�base64url_encode�der_to_raw_signature� force_bytes�
force_unicode�from_base64url_uint�raw_to_der_signature�to_base64url_uint�
is_pem_format�
is_ssh_key)�hashes)�load_pem_private_key�load_pem_public_key�load_ssh_public_key)�
RSAPrivateKey� RSAPublicKey�RSAPrivateNumbers�RSAPublicNumbers�rsa_recover_prime_factors� rsa_crt_dmp1� rsa_crt_dmq1� rsa_crt_iqmp)�EllipticCurvePrivateKey�EllipticCurvePublicKey)�ec�padding)�default_backend)�InvalidSignatureTF�RS256�RS384�RS512�ES256�ES384�ES521�ES512�PS256�PS384�PS512c
C s� t � ttj�ttj�ttj�d�} tr�| �ttj�ttj�ttj�ttj�ttj�ttj�ttj�t t j�t t j�t t j�d�
� | S )zE
Returns the algorithms that are implemented by the library.
)ZnoneZHS256ZHS384ZHS512)
r# r$ r% r& r' r( r) r* r+ r, )
�
NoneAlgorithm�
HMACAlgorithm�SHA256�SHA384�SHA512�
has_crypto�update� RSAAlgorithm� ECAlgorithm�RSAPSSAlgorithm)Zdefault_algorithms� r7 �0/usr/lib/python3/dist-packages/jwt/algorithms.py�get_default_algorithms' s& ��
r9 c @ s@ e Zd ZdZdd� Zdd� Zdd� Zedd � �Zed
d � �Z d S )
� AlgorithmzH
The interface for an algorithm used to sign and verify tokens.
c C s t �dS )z�
Performs necessary validation and conversions on the key and returns
the key value in the proper format for sign() and verify().
N��NotImplementedError��self�keyr7 r7 r8 � prepare_keyG s zAlgorithm.prepare_keyc C s t �dS )zn
Returns a digital signature for the specified message
using the specified key value.
Nr; �r> �msgr? r7 r7 r8 �signN s zAlgorithm.signc C s t �dS )zz
Verifies that the specified digital signature is valid
for the specified message and key values.
Nr; �r> rB r? �sigr7 r7 r8 �verifyU s zAlgorithm.verifyc C s t �dS )z7
Serializes a given RSA key into a JWK
Nr; ��key_objr7 r7 r8 �to_jwk\ s zAlgorithm.to_jwkc C s t �dS )zb
Deserializes a given RSA key from JWK back into a PublicKey or PrivateKey object
Nr; )�jwkr7 r7 r8 �from_jwkc s zAlgorithm.from_jwkN)
�__name__�
__module__� __qualname__�__doc__r@ rC rF � staticmethodrI rK r7 r7 r7 r8 r: C s
r: c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) r- zZ
Placeholder for use when no signing or verification
operations are required.
c C s |dkr d }|d k r t d��|S )N� z*When alg = "none", key value must be None.r r= r7 r7 r8 r@ p s
zNoneAlgorithm.prepare_keyc C s dS )N� r7 rA r7 r7 r8 rC y s zNoneAlgorithm.signc C s dS )NFr7 rD r7 r7 r8 rF | s zNoneAlgorithm.verifyN)rL rM rN rO r@ rC rF r7 r7 r7 r8 r- k s r- c @ sZ e Zd ZdZejZejZej Z
dd� Z dd� Z e
dd� �Ze
dd � �Zd
d � Zd d
� ZdS )r. zf
Performs signing and verification operations using HMAC
and the specified hash function.
c C s
|| _ d S �N��hash_alg�r> rU r7 r7 r8 �__init__� s zHMACAlgorithm.__init__c C s$ t |�}t|�st|�r td��|S )NzdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r
r r r r= r7 r7 r8 r@ � s �zHMACAlgorithm.prepare_keyc C s t �ttt| ���dd��S )N�oct)�k�kty)�json�dumpsr r r
rG r7 r7 r8 rI � s �zHMACAlgorithm.to_jwkc C s, t �| �}|�d�dkr td��t|d �S )NrZ rX zNot an HMAC keyrY )r[ �loads�getr r )rJ �objr7 r7 r8 rK � s
zHMACAlgorithm.from_jwkc C s t �||| j��� S rS )�hmac�newrU ZdigestrA r7 r7 r8 rC � s zHMACAlgorithm.signc C s t || �||��S rS )r rC rD r7 r7 r8 rF � s zHMACAlgorithm.verifyN)rL rM rN rO �hashlibZsha256r/ Zsha384r0 Zsha512r1 rW r@ rP rI rK rC rF r7 r7 r7 r8 r. � s
r. c @ sZ e Zd ZdZejZejZejZdd� Zdd� Z e
dd� �Z e
dd � �Z d
d � Z
d d
� ZdS )r4 z~
Performs signing and verification operations using
RSASSA-PKCS-v1_5 and the specified hash function.
c C s
|| _ d S rS rT rV r7 r7 r8 rW � s zRSAAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r~t|�}z.|�d�rFt|t� d�}nt|d t� d�}W q� t k
rz t
|t� d�}Y q�X nt d��|S )Ns ssh-rsa��backend�Zpasswordrd � Expecting a PEM-formatted key.) �
isinstancer r r r
�
startswithr r! r �
ValueErrorr � TypeErrorr= r7 r7 r8 r@ � s
�
zRSAAlgorithm.prepare_keyc C s� d }t | dd �r�| �� }ddgtt|jj��tt|jj��tt|j��tt|j��tt|j ��tt|j
��tt|j ��tt|j ��d�
}nBt | dd �r�| �� }ddgtt|j��tt|j��d�}nt
d��t�|�S )N�private_numbers�RSArC )
rZ �key_ops�n�e�d�p�q�dp�dq�qirF )rZ rm rn ro �Not a public or private key)�getattrrk r r �public_numbersrn ro rp rq rr �dmp1�dmq1�iqmpr r[ r\ )rH r_ �numbersr7 r7 r8 rI � s. �
�zRSAAlgorithm.to_jwkc s� zt �| �� W n tk
r* td��Y nX � �d�dkrBtd��d� k�rhd� k�rhd� k�rhd� krptd ��d
d d d
dg}� fdd�|D �}t|�}|r�t|�s�td��tt� d �t� d ��}|�rt t� d �t� d
�t� d �t� d �t� d
�t� d �|d�}nHt� d �}t
|j ||j �\}}t |||t
||�t||�t||�|d�}|�t� �S d� k�r�d� k�r�tt� d �t� d ��}|�t� �S td��d S )NzKey is not valid JSONrZ rl zNot an RSA keyrp ro rn Zothz5Unsupported RSA private key: > 2 primes not supportedrq rr rs rt ru c s g | ] }|� k�qS r7 r7 )�.0Zprop�r_ r7 r8 �
<listcomp> s z)RSAAlgorithm.from_jwk.<locals>.<listcomp>z@RSA key must include all parameters if any are present besides d)rp rq rr ry rz r{ rx rv )r[ r] ri r r^ �any�allr r r r rn ro r r r Z private_keyr! Z
public_key) rJ Z other_propsZ props_foundZany_props_foundrx r| rp rq rr r7 r~ r8 rK � sf
�
�
��
� zRSAAlgorithm.from_jwkc C s |� |t�� | �� �S rS )rC r �PKCS1v15rU rA r7 r7 r8 rC 2 s zRSAAlgorithm.signc C s: z |� ||t�� | �� � W dS tk
r4 Y dS X d S )NTF)rF r r� rU r" rD r7 r7 r8 rF 5 s
zRSAAlgorithm.verifyN)rL rM rN rO r r/ r0 r1 rW r@ rP rI rK rC rF r7 r7 r7 r8 r4 � s
#
>r4 c @ sB e Zd ZdZejZejZejZdd� Zdd� Z dd� Z
dd � Z d
S ) r5 zr
Performs signing and verification operations using
ECDSA and the specified hash function
c C s
|| _ d S rS rT rV r7 r7 r8 rW E s zECAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r~t|�}z,|�d�rFt|t� d�}nt|t� d�}W q� t k
rz t
|d t� d�}Y q�X nt d��|S )Ns ecdsa-sha2-rc re rf ) rg r r r r
rh r r! r ri r rj r= r7 r7 r8 r@ H s
�
zECAlgorithm.prepare_keyc C s" |� |t�| �� ��}t||j�S rS )rC r �ECDSArU r �curve)r> rB r? �der_sigr7 r7 r8 rC ` s zECAlgorithm.signc C sb zt ||j�}W n tk
r& Y dS X z |�||t�| �� �� W dS tk
r\ Y dS X d S )NFT)r
r� ri rF r r� rU r" )r> rB r? rE r� r7 r7 r8 rF e s zECAlgorithm.verifyN) rL rM rN rO r r/ r0 r1 rW r@ rC rF r7 r7 r7 r8 r5 < s r5 c @ s e Zd ZdZdd� Zdd� ZdS )r6 zA
Performs a signature using RSASSA-PSS with MGF1
c C s* |� |tjt�| �� �| jjd�| �� �S )N�ZmgfZ salt_length)rC r �PSS�MGF1rU � digest_sizerA r7 r7 r8 rC v s ��zRSAPSSAlgorithm.signc C sN z2|� ||tjt�| �� �| jjd�| �� � W dS tk
rH Y dS X d S )Nr� TF)rF r r� r� rU r� r" rD r7 r7 r8 rF � s �� zRSAPSSAlgorithm.verifyN)rL rM rN rO rC rF r7 r7 r7 r8 r6 q s
r6 )8rb r` r[ �compatr r �
exceptionsr Zutilsr r r r
r r r
r r r Z cryptography.hazmat.primitivesr Z,cryptography.hazmat.primitives.serializationr r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r r r r Z,cryptography.hazmat.primitives.asymmetric.ecr r Z)cryptography.hazmat.primitives.asymmetricr r Z cryptography.hazmat.backendsr! Zcryptography.exceptionsr" r2 � ImportError�setZrequires_cryptographyr9 �objectr: r- r. r4 r5 r6 r7 r7 r7 r8 �<module> s@ 0 (
� (- 5
Mini Shell