Yanz Mini Shell
[_]
[-]
[X]
[
HomeShell 1
] [
HomeShell 2
] [
Upload
] [
Command Shell
] [
Scripting
] [
About
]
[ Directory ] =>
/
home
veronikagstoette
public_html
wp-content
Action
[*]
New File
[*]
New Folder
Sensitive File
[*]
/etc/passwd
[*]
/etc/shadow
[*]
/etc/resolv.conf
[
Delete
] [
Edit
] [
Rename
] [
Back
]
PK $]{[(�E E utils.pynu �[��� import base64 import binascii import struct from .compat import binary_type, bytes_from_int, text_type try: from cryptography.hazmat.primitives.asymmetric.utils import ( decode_dss_signature, encode_dss_signature ) except ImportError: pass def force_unicode(value): if isinstance(value, binary_type): return value.decode('utf-8') elif isinstance(value, text_type): return value else: raise TypeError('Expected a string value') def force_bytes(value): if isinstance(value, text_type): return value.encode('utf-8') elif isinstance(value, binary_type): return value else: raise TypeError('Expected a string value') def base64url_decode(input): if isinstance(input, text_type): input = input.encode('ascii') rem = len(input) % 4 if rem > 0: input += b'=' * (4 - rem) return base64.urlsafe_b64decode(input) def base64url_encode(input): return base64.urlsafe_b64encode(input).replace(b'=', b'') def to_base64url_uint(val): if val < 0: raise ValueError('Must be a positive integer') int_bytes = bytes_from_int(val) if len(int_bytes) == 0: int_bytes = b'\x00' return base64url_encode(int_bytes) def from_base64url_uint(val): if isinstance(val, text_type): val = val.encode('ascii') data = base64url_decode(val) buf = struct.unpack('%sB' % len(data), data) return int(''.join(["%02x" % byte for byte in buf]), 16) def merge_dict(original, updates): if not updates: return original try: merged_options = original.copy() merged_options.update(updates) except (AttributeError, ValueError) as e: raise TypeError('original and updates must be a dictionary: %s' % e) return merged_options def number_to_bytes(num, num_bytes): padded_hex = '%0*x' % (2 * num_bytes, num) big_endian = binascii.a2b_hex(padded_hex.encode('ascii')) return big_endian def bytes_to_number(string): return int(binascii.b2a_hex(string), 16) def der_to_raw_signature(der_sig, curve): num_bits = curve.key_size num_bytes = (num_bits + 7) // 8 r, s = decode_dss_signature(der_sig) return number_to_bytes(r, num_bytes) + number_to_bytes(s, num_bytes) def raw_to_der_signature(raw_sig, curve): num_bits = curve.key_size num_bytes = (num_bits + 7) // 8 if len(raw_sig) != 2 * num_bytes: raise ValueError('Invalid signature') r = bytes_to_number(raw_sig[:num_bytes]) s = bytes_to_number(raw_sig[num_bytes:]) return encode_dss_signature(r, s) PK $]��� � api_jws.pynu �[��� import binascii import json import warnings from collections import Mapping from .algorithms import ( Algorithm, get_default_algorithms, has_crypto, requires_cryptography # NOQA ) from .compat import binary_type, string_types, text_type from .exceptions import ( DecodeError, InvalidAlgorithmError, InvalidSignatureError, InvalidTokenError ) from .utils import base64url_decode, base64url_encode, force_bytes, merge_dict class PyJWS(object): header_typ = 'JWT' def __init__(self, algorithms=None, options=None): self._algorithms = get_default_algorithms() self._valid_algs = (set(algorithms) if algorithms is not None else set(self._algorithms)) # Remove algorithms that aren't on the whitelist for key in list(self._algorithms.keys()): if key not in self._valid_algs: del self._algorithms[key] if not options: options = {} self.options = merge_dict(self._get_default_options(), options) @staticmethod def _get_default_options(): return { 'verify_signature': True } def register_algorithm(self, alg_id, alg_obj): """ Registers a new Algorithm for use when creating and verifying tokens. """ if alg_id in self._algorithms: raise ValueError('Algorithm already has a handler.') if not isinstance(alg_obj, Algorithm): raise TypeError('Object is not of type `Algorithm`') self._algorithms[alg_id] = alg_obj self._valid_algs.add(alg_id) def unregister_algorithm(self, alg_id): """ Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. """ if alg_id not in self._algorithms: raise KeyError('The specified algorithm could not be removed' ' because it is not registered.') del self._algorithms[alg_id] self._valid_algs.remove(alg_id) def get_algorithms(self): """ Returns a list of supported values for the 'alg' parameter. """ return list(self._valid_algs) def encode(self, payload, key, algorithm='HS256', headers=None, json_encoder=None): segments = [] if algorithm is None: algorithm = 'none' if algorithm not in self._valid_algs: pass # Header header = {'typ': self.header_typ, 'alg': algorithm} if headers: self._validate_headers(headers) header.update(headers) json_header = force_bytes( json.dumps( header, separators=(',', ':'), cls=json_encoder ) ) segments.append(base64url_encode(json_header)) segments.append(base64url_encode(payload)) # Segments signing_input = b'.'.join(segments) try: alg_obj = self._algorithms[algorithm] key = alg_obj.prepare_key(key) signature = alg_obj.sign(signing_input, key) except KeyError: if not has_crypto and algorithm in requires_cryptography: raise NotImplementedError( "Algorithm '%s' could not be found. Do you have cryptography " "installed?" % algorithm ) else: raise NotImplementedError('Algorithm not supported') segments.append(base64url_encode(signature)) return b'.'.join(segments) def decode(self, jws, key='', verify=True, algorithms=None, options=None, **kwargs): merged_options = merge_dict(self.options, options) verify_signature = merged_options['verify_signature'] if verify_signature and not algorithms: warnings.warn( 'It is strongly recommended that you pass in a ' + 'value for the "algorithms" argument when calling decode(). ' + 'This argument will be mandatory in a future version.', DeprecationWarning ) payload, signing_input, header, signature = self._load(jws) if not verify: warnings.warn('The verify parameter is deprecated. ' 'Please use verify_signature in options instead.', DeprecationWarning, stacklevel=2) elif verify_signature: self._verify_signature(payload, signing_input, header, signature, key, algorithms) return payload def get_unverified_header(self, jwt): """Returns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete """ headers = self._load(jwt)[2] self._validate_headers(headers) return headers def _load(self, jwt): if isinstance(jwt, text_type): jwt = jwt.encode('utf-8') if not issubclass(type(jwt), binary_type): raise DecodeError("Invalid token type. Token must be a {0}".format( binary_type)) try: signing_input, crypto_segment = jwt.rsplit(b'.', 1) header_segment, payload_segment = signing_input.split(b'.', 1) except ValueError: raise DecodeError('Not enough segments') try: header_data = base64url_decode(header_segment) except (TypeError, binascii.Error): raise DecodeError('Invalid header padding') try: header = json.loads(header_data.decode('utf-8')) except ValueError as e: raise DecodeError('Invalid header string: %s' % e) if not isinstance(header, Mapping): raise DecodeError('Invalid header string: must be a json object') try: payload = base64url_decode(payload_segment) except (TypeError, binascii.Error): raise DecodeError('Invalid payload padding') try: signature = base64url_decode(crypto_segment) except (TypeError, binascii.Error): raise DecodeError('Invalid crypto padding') return (payload, signing_input, header, signature) def _verify_signature(self, payload, signing_input, header, signature, key='', algorithms=None): alg = header.get('alg') if algorithms is not None and alg not in algorithms: raise InvalidAlgorithmError('The specified alg value is not allowed') try: alg_obj = self._algorithms[alg] key = alg_obj.prepare_key(key) if not alg_obj.verify(signing_input, key, signature): raise InvalidSignatureError('Signature verification failed') except KeyError: raise InvalidAlgorithmError('Algorithm not supported') def _validate_headers(self, headers): if 'kid' in headers: self._validate_kid(headers['kid']) def _validate_kid(self, kid): if not isinstance(kid, string_types): raise InvalidTokenError('Key ID header parameter must be a string') _jws_global_obj = PyJWS() encode = _jws_global_obj.encode decode = _jws_global_obj.decode register_algorithm = _jws_global_obj.register_algorithm unregister_algorithm = _jws_global_obj.unregister_algorithm get_unverified_header = _jws_global_obj.get_unverified_header PK $]�:Ѵ� � compat.pynu �[��� """ The `compat` module provides support for backwards compatibility with older versions of python, and compatibility wrappers around optional packages. """ # flake8: noqa import hmac import struct import sys PY3 = sys.version_info[0] == 3 if PY3: text_type = str binary_type = bytes else: text_type = unicode binary_type = str string_types = (text_type, binary_type) try: constant_time_compare = hmac.compare_digest except AttributeError: # Fallback for Python < 2.7 def constant_time_compare(val1, val2): """ Returns True if the two strings are equal, False otherwise. The time taken is independent of the number of characters that match. """ if len(val1) != len(val2): return False result = 0 for x, y in zip(val1, val2): result |= ord(x) ^ ord(y) return result == 0 # Use int.to_bytes if it exists (Python 3) if getattr(int, 'to_bytes', None): def bytes_from_int(val): remaining = val byte_length = 0 while remaining != 0: remaining = remaining >> 8 byte_length += 1 return val.to_bytes(byte_length, 'big', signed=False) else: def bytes_from_int(val): buf = [] while val: val, remainder = divmod(val, 256) buf.append(remainder) buf.reverse() return struct.pack('%sB' % len(buf), *buf) PK $]��4 4 algorithms.pynu �[��� import hashlib import hmac import json from .compat import constant_time_compare, string_types from .exceptions import InvalidKeyError from .utils import ( base64url_decode, base64url_encode, der_to_raw_signature, force_bytes, force_unicode, from_base64url_uint, raw_to_der_signature, to_base64url_uint ) try: from cryptography.hazmat.primitives import hashes from cryptography.hazmat.primitives.serialization import ( load_pem_private_key, load_pem_public_key, load_ssh_public_key ) from cryptography.hazmat.primitives.asymmetric.rsa import ( RSAPrivateKey, RSAPublicKey, RSAPrivateNumbers, RSAPublicNumbers, rsa_recover_prime_factors, rsa_crt_dmp1, rsa_crt_dmq1, rsa_crt_iqmp ) from cryptography.hazmat.primitives.asymmetric.ec import ( EllipticCurvePrivateKey, EllipticCurvePublicKey ) from cryptography.hazmat.primitives.asymmetric import ec, padding from cryptography.hazmat.backends import default_backend from cryptography.exceptions import InvalidSignature has_crypto = True except ImportError: has_crypto = False requires_cryptography = set(['RS256', 'RS384', 'RS512', 'ES256', 'ES384', 'ES521', 'ES512', 'PS256', 'PS384', 'PS512']) def get_default_algorithms(): """ Returns the algorithms that are implemented by the library. """ default_algorithms = { 'none': NoneAlgorithm(), 'HS256': HMACAlgorithm(HMACAlgorithm.SHA256), 'HS384': HMACAlgorithm(HMACAlgorithm.SHA384), 'HS512': HMACAlgorithm(HMACAlgorithm.SHA512) } if has_crypto: default_algorithms.update({ 'RS256': RSAAlgorithm(RSAAlgorithm.SHA256), 'RS384': RSAAlgorithm(RSAAlgorithm.SHA384), 'RS512': RSAAlgorithm(RSAAlgorithm.SHA512), 'ES256': ECAlgorithm(ECAlgorithm.SHA256), 'ES384': ECAlgorithm(ECAlgorithm.SHA384), 'ES521': ECAlgorithm(ECAlgorithm.SHA512), 'ES512': ECAlgorithm(ECAlgorithm.SHA512), # Backward compat for #219 fix 'PS256': RSAPSSAlgorithm(RSAPSSAlgorithm.SHA256), 'PS384': RSAPSSAlgorithm(RSAPSSAlgorithm.SHA384), 'PS512': RSAPSSAlgorithm(RSAPSSAlgorithm.SHA512) }) return default_algorithms class Algorithm(object): """ The interface for an algorithm used to sign and verify tokens. """ def prepare_key(self, key): """ Performs necessary validation and conversions on the key and returns the key value in the proper format for sign() and verify(). """ raise NotImplementedError def sign(self, msg, key): """ Returns a digital signature for the specified message using the specified key value. """ raise NotImplementedError def verify(self, msg, key, sig): """ Verifies that the specified digital signature is valid for the specified message and key values. """ raise NotImplementedError @staticmethod def to_jwk(key_obj): """ Serializes a given RSA key into a JWK """ raise NotImplementedError @staticmethod def from_jwk(jwk): """ Deserializes a given RSA key from JWK back into a PublicKey or PrivateKey object """ raise NotImplementedError class NoneAlgorithm(Algorithm): """ Placeholder for use when no signing or verification operations are required. """ def prepare_key(self, key): if key == '': key = None if key is not None: raise InvalidKeyError('When alg = "none", key value must be None.') return key def sign(self, msg, key): return b'' def verify(self, msg, key, sig): return False class HMACAlgorithm(Algorithm): """ Performs signing and verification operations using HMAC and the specified hash function. """ SHA256 = hashlib.sha256 SHA384 = hashlib.sha384 SHA512 = hashlib.sha512 def __init__(self, hash_alg): self.hash_alg = hash_alg def prepare_key(self, key): key = force_bytes(key) invalid_strings = [ b'-----BEGIN PUBLIC KEY-----', b'-----BEGIN CERTIFICATE-----', b'-----BEGIN RSA PUBLIC KEY-----', b'ssh-rsa' ] if any([string_value in key for string_value in invalid_strings]): raise InvalidKeyError( 'The specified key is an asymmetric key or x509 certificate and' ' should not be used as an HMAC secret.') return key @staticmethod def to_jwk(key_obj): return json.dumps({ 'k': force_unicode(base64url_encode(force_bytes(key_obj))), 'kty': 'oct' }) @staticmethod def from_jwk(jwk): obj = json.loads(jwk) if obj.get('kty') != 'oct': raise InvalidKeyError('Not an HMAC key') return base64url_decode(obj['k']) def sign(self, msg, key): return hmac.new(key, msg, self.hash_alg).digest() def verify(self, msg, key, sig): return constant_time_compare(sig, self.sign(msg, key)) if has_crypto: class RSAAlgorithm(Algorithm): """ Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. """ SHA256 = hashes.SHA256 SHA384 = hashes.SHA384 SHA512 = hashes.SHA512 def __init__(self, hash_alg): self.hash_alg = hash_alg def prepare_key(self, key): if isinstance(key, RSAPrivateKey) or \ isinstance(key, RSAPublicKey): return key if isinstance(key, string_types): key = force_bytes(key) try: if key.startswith(b'ssh-rsa'): key = load_ssh_public_key(key, backend=default_backend()) else: key = load_pem_private_key(key, password=None, backend=default_backend()) except ValueError: key = load_pem_public_key(key, backend=default_backend()) else: raise TypeError('Expecting a PEM-formatted key.') return key @staticmethod def to_jwk(key_obj): obj = None if getattr(key_obj, 'private_numbers', None): # Private key numbers = key_obj.private_numbers() obj = { 'kty': 'RSA', 'key_ops': ['sign'], 'n': force_unicode(to_base64url_uint(numbers.public_numbers.n)), 'e': force_unicode(to_base64url_uint(numbers.public_numbers.e)), 'd': force_unicode(to_base64url_uint(numbers.d)), 'p': force_unicode(to_base64url_uint(numbers.p)), 'q': force_unicode(to_base64url_uint(numbers.q)), 'dp': force_unicode(to_base64url_uint(numbers.dmp1)), 'dq': force_unicode(to_base64url_uint(numbers.dmq1)), 'qi': force_unicode(to_base64url_uint(numbers.iqmp)) } elif getattr(key_obj, 'verify', None): # Public key numbers = key_obj.public_numbers() obj = { 'kty': 'RSA', 'key_ops': ['verify'], 'n': force_unicode(to_base64url_uint(numbers.n)), 'e': force_unicode(to_base64url_uint(numbers.e)) } else: raise InvalidKeyError('Not a public or private key') return json.dumps(obj) @staticmethod def from_jwk(jwk): try: obj = json.loads(jwk) except ValueError: raise InvalidKeyError('Key is not valid JSON') if obj.get('kty') != 'RSA': raise InvalidKeyError('Not an RSA key') if 'd' in obj and 'e' in obj and 'n' in obj: # Private key if 'oth' in obj: raise InvalidKeyError('Unsupported RSA private key: > 2 primes not supported') other_props = ['p', 'q', 'dp', 'dq', 'qi'] props_found = [prop in obj for prop in other_props] any_props_found = any(props_found) if any_props_found and not all(props_found): raise InvalidKeyError('RSA key must include all parameters if any are present besides d') public_numbers = RSAPublicNumbers( from_base64url_uint(obj['e']), from_base64url_uint(obj['n']) ) if any_props_found: numbers = RSAPrivateNumbers( d=from_base64url_uint(obj['d']), p=from_base64url_uint(obj['p']), q=from_base64url_uint(obj['q']), dmp1=from_base64url_uint(obj['dp']), dmq1=from_base64url_uint(obj['dq']), iqmp=from_base64url_uint(obj['qi']), public_numbers=public_numbers ) else: d = from_base64url_uint(obj['d']) p, q = rsa_recover_prime_factors( public_numbers.n, d, public_numbers.e ) numbers = RSAPrivateNumbers( d=d, p=p, q=q, dmp1=rsa_crt_dmp1(d, p), dmq1=rsa_crt_dmq1(d, q), iqmp=rsa_crt_iqmp(p, q), public_numbers=public_numbers ) return numbers.private_key(default_backend()) elif 'n' in obj and 'e' in obj: # Public key numbers = RSAPublicNumbers( from_base64url_uint(obj['e']), from_base64url_uint(obj['n']) ) return numbers.public_key(default_backend()) else: raise InvalidKeyError('Not a public or private key') def sign(self, msg, key): return key.sign(msg, padding.PKCS1v15(), self.hash_alg()) def verify(self, msg, key, sig): try: key.verify(sig, msg, padding.PKCS1v15(), self.hash_alg()) return True except InvalidSignature: return False class ECAlgorithm(Algorithm): """ Performs signing and verification operations using ECDSA and the specified hash function """ SHA256 = hashes.SHA256 SHA384 = hashes.SHA384 SHA512 = hashes.SHA512 def __init__(self, hash_alg): self.hash_alg = hash_alg def prepare_key(self, key): if isinstance(key, EllipticCurvePrivateKey) or \ isinstance(key, EllipticCurvePublicKey): return key if isinstance(key, string_types): key = force_bytes(key) # Attempt to load key. We don't know if it's # a Signing Key or a Verifying Key, so we try # the Verifying Key first. try: if key.startswith(b'ecdsa-sha2-'): key = load_ssh_public_key(key, backend=default_backend()) else: key = load_pem_public_key(key, backend=default_backend()) except ValueError: key = load_pem_private_key(key, password=None, backend=default_backend()) else: raise TypeError('Expecting a PEM-formatted key.') return key def sign(self, msg, key): der_sig = key.sign(msg, ec.ECDSA(self.hash_alg())) return der_to_raw_signature(der_sig, key.curve) def verify(self, msg, key, sig): try: der_sig = raw_to_der_signature(sig, key.curve) except ValueError: return False try: key.verify(der_sig, msg, ec.ECDSA(self.hash_alg())) return True except InvalidSignature: return False class RSAPSSAlgorithm(RSAAlgorithm): """ Performs a signature using RSASSA-PSS with MGF1 """ def sign(self, msg, key): return key.sign( msg, padding.PSS( mgf=padding.MGF1(self.hash_alg()), salt_length=self.hash_alg.digest_size ), self.hash_alg() ) def verify(self, msg, key, sig): try: key.verify( sig, msg, padding.PSS( mgf=padding.MGF1(self.hash_alg()), salt_length=self.hash_alg.digest_size ), self.hash_alg() ) return True except InvalidSignature: return False PK $]S�M�� � __main__.pynu �[��� #!/usr/bin/env python from __future__ import absolute_import, print_function import argparse import json import sys import time from . import DecodeError, __version__, decode, encode def encode_payload(args): # Try to encode if args.key is None: raise ValueError('Key is required when encoding. See --help for usage.') # Build payload object to encode payload = {} for arg in args.payload: k, v = arg.split('=', 1) # exp +offset special case? if k == 'exp' and v[0] == '+' and len(v) > 1: v = str(int(time.time()+int(v[1:]))) # Cast to integer? if v.isdigit(): v = int(v) else: # Cast to float? try: v = float(v) except ValueError: pass # Cast to true, false, or null? constants = {'true': True, 'false': False, 'null': None} if v in constants: v = constants[v] payload[k] = v token = encode( payload, key=args.key, algorithm=args.algorithm ) return token.decode('utf-8') def decode_payload(args): try: if args.token: token = args.token else: if sys.stdin.isatty(): token = sys.stdin.readline().strip() else: raise IOError('Cannot read from stdin: terminal not a TTY') token = token.encode('utf-8') data = decode(token, key=args.key, verify=args.verify) return json.dumps(data) except DecodeError as e: raise DecodeError('There was an error decoding the token: %s' % e) def build_argparser(): usage = ''' Encodes or decodes JSON Web Tokens based on input. %(prog)s [options] <command> [options] input Decoding examples: %(prog)s --key=secret decode json.web.token %(prog)s decode --no-verify json.web.token Encoding requires the key option and takes space separated key/value pairs separated by equals (=) as input. Examples: %(prog)s --key=secret encode iss=me exp=1302049071 %(prog)s --key=secret encode foo=bar exp=+10 The exp key is special and can take an offset to current Unix time. ''' arg_parser = argparse.ArgumentParser( prog='pyjwt', usage=usage ) arg_parser.add_argument( '-v', '--version', action='version', version='%(prog)s ' + __version__ ) arg_parser.add_argument( '--key', dest='key', metavar='KEY', default=None, help='set the secret key to sign with' ) arg_parser.add_argument( '--alg', dest='algorithm', metavar='ALG', default='HS256', help='set crypto algorithm to sign with. default=HS256' ) subparsers = arg_parser.add_subparsers( title='PyJWT subcommands', description='valid subcommands', help='additional help' ) # Encode subcommand encode_parser = subparsers.add_parser('encode', help='use to encode a supplied payload') payload_help = """Payload to encode. Must be a space separated list of key/value pairs separated by equals (=) sign.""" encode_parser.add_argument('payload', nargs='+', help=payload_help) encode_parser.set_defaults(func=encode_payload) # Decode subcommand decode_parser = subparsers.add_parser('decode', help='use to decode a supplied JSON web token') decode_parser.add_argument( 'token', help='JSON web token to decode.', nargs='?') decode_parser.add_argument( '-n', '--no-verify', action='store_false', dest='verify', default=True, help='ignore signature and claims verification on decode' ) decode_parser.set_defaults(func=decode_payload) return arg_parser def main(): arg_parser = build_argparser() try: arguments = arg_parser.parse_args(sys.argv[1:]) output = arguments.func(arguments) print(output) except Exception as e: print('There was an unforseen error: ', e) arg_parser.print_help() PK $]�9) ~ ~ exceptions.pynu �[��� class InvalidTokenError(Exception): pass class DecodeError(InvalidTokenError): pass class InvalidSignatureError(DecodeError): pass class ExpiredSignatureError(InvalidTokenError): pass class InvalidAudienceError(InvalidTokenError): pass class InvalidIssuerError(InvalidTokenError): pass class InvalidIssuedAtError(InvalidTokenError): pass class ImmatureSignatureError(InvalidTokenError): pass class InvalidKeyError(Exception): pass class InvalidAlgorithmError(InvalidTokenError): pass class MissingRequiredClaimError(InvalidTokenError): def __init__(self, claim): self.claim = claim def __str__(self): return 'Token is missing the "%s" claim' % self.claim # Compatibility aliases (deprecated) ExpiredSignature = ExpiredSignatureError InvalidAudience = InvalidAudienceError InvalidIssuer = InvalidIssuerError PK $] contrib/__init__.pynu �[��� PK $]�ۤq q + contrib/__pycache__/__init__.cpython-36.pycnu �[��� 3 �k�Z � @ s d S )N� r r r � /usr/lib/python3.6/__init__.py�<module> s PK $]�ۤq q 1 contrib/__pycache__/__init__.cpython-36.opt-1.pycnu �[��� 3 �k�Z � @ s d S )N� r r r � /usr/lib/python3.6/__init__.py�<module> s PK $]���� � contrib/algorithms/py_ecdsa.pynu �[��� # Note: This file is named py_ecdsa.py because import behavior in Python 2 # would cause ecdsa.py to squash the ecdsa library that it depends upon. import hashlib import ecdsa from jwt.algorithms import Algorithm from jwt.compat import string_types, text_type class ECAlgorithm(Algorithm): """ Performs signing and verification operations using ECDSA and the specified hash function This class requires the ecdsa package to be installed. This is based off of the implementation in PyJWT 0.3.2 """ SHA256 = hashlib.sha256 SHA384 = hashlib.sha384 SHA512 = hashlib.sha512 def __init__(self, hash_alg): self.hash_alg = hash_alg def prepare_key(self, key): if isinstance(key, ecdsa.SigningKey) or \ isinstance(key, ecdsa.VerifyingKey): return key if isinstance(key, string_types): if isinstance(key, text_type): key = key.encode('utf-8') # Attempt to load key. We don't know if it's # a Signing Key or a Verifying Key, so we try # the Verifying Key first. try: key = ecdsa.VerifyingKey.from_pem(key) except ecdsa.der.UnexpectedDER: key = ecdsa.SigningKey.from_pem(key) else: raise TypeError('Expecting a PEM-formatted key.') return key def sign(self, msg, key): return key.sign(msg, hashfunc=self.hash_alg, sigencode=ecdsa.util.sigencode_string) def verify(self, msg, key, sig): try: return key.verify(sig, msg, hashfunc=self.hash_alg, sigdecode=ecdsa.util.sigdecode_string) except AssertionError: return False PK $] contrib/algorithms/__init__.pynu �[��� PK $]p"�c� � contrib/algorithms/pycrypto.pynu �[��� import Crypto.Hash.SHA256 import Crypto.Hash.SHA384 import Crypto.Hash.SHA512 from Crypto.PublicKey import RSA from Crypto.Signature import PKCS1_v1_5 from jwt.algorithms import Algorithm from jwt.compat import string_types, text_type class RSAAlgorithm(Algorithm): """ Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. This class requires PyCrypto package to be installed. This is based off of the implementation in PyJWT 0.3.2 """ SHA256 = Crypto.Hash.SHA256 SHA384 = Crypto.Hash.SHA384 SHA512 = Crypto.Hash.SHA512 def __init__(self, hash_alg): self.hash_alg = hash_alg def prepare_key(self, key): if isinstance(key, RSA._RSAobj): return key if isinstance(key, string_types): if isinstance(key, text_type): key = key.encode('utf-8') key = RSA.importKey(key) else: raise TypeError('Expecting a PEM- or RSA-formatted key.') return key def sign(self, msg, key): return PKCS1_v1_5.new(key).sign(self.hash_alg.new(msg)) def verify(self, msg, key, sig): return PKCS1_v1_5.new(key).verify(self.hash_alg.new(msg), sig) PK $]wʸ]� � < contrib/algorithms/__pycache__/pycrypto.cpython-36.opt-1.pycnu �[��� 3 �k�Z� � @ s` d dl Zd dlZd dlZd dlmZ d dlmZ d dlm Z d dl m Z m Z G dd� de �Z dS )� N)�RSA)� PKCS1_v1_5)� Algorithm)� string_types� text_typec @ sH e Zd ZdZejjZejjZejjZdd� Z dd� Z dd� Z dd � Z d S ) � RSAAlgorithmz� Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. This class requires PyCrypto package to be installed. This is based off of the implementation in PyJWT 0.3.2 c C s || _ d S )N)�hash_alg)�selfr � r � /usr/lib/python3.6/pycrypto.py�__init__ s zRSAAlgorithm.__init__c C sF t |tj�r|S t |t�r:t |t�r.|jd�}tj|�}ntd��|S )Nzutf-8z&Expecting a PEM- or RSA-formatted key.)� isinstancer Z_RSAobjr r �encodeZ importKey� TypeError)r �keyr r r � prepare_key s zRSAAlgorithm.prepare_keyc C s t j|�j| jj|��S )N)r �new�signr )r �msgr r r r r * s zRSAAlgorithm.signc C s t j|�j| jj|�|�S )N)r r �verifyr )r r r Zsigr r r r - s zRSAAlgorithm.verifyN) �__name__� __module__� __qualname__�__doc__�CryptoZHashZSHA256ZSHA384ZSHA512r r r r r r r r r s r )ZCrypto.Hash.SHA256r ZCrypto.Hash.SHA384ZCrypto.Hash.SHA512ZCrypto.PublicKeyr ZCrypto.Signaturer Zjwt.algorithmsr Z jwt.compatr r r r r r r �<module> s PK $]���� � 6 contrib/algorithms/__pycache__/py_ecdsa.cpython-36.pycnu �[��� 3 �k�Z� � @ s@ d dl Z d dlZd dlmZ d dlmZmZ G dd� de�ZdS )� N)� Algorithm)� string_types� text_typec @ sB e Zd ZdZejZejZej Z dd� Z dd� Z dd� Z dd � Zd S ) � ECAlgorithmz� Performs signing and verification operations using ECDSA and the specified hash function This class requires the ecdsa package to be installed. This is based off of the implementation in PyJWT 0.3.2 c C s || _ d S )N)�hash_alg)�selfr � r � /usr/lib/python3.6/py_ecdsa.py�__init__ s zECAlgorithm.__init__c C s~ t |tj�st |tj�r |S t |t�rrt |t�r:|jd�}ytjj|�}W qz tjj k rn tjj|�}Y qzX nt d��|S )Nzutf-8z Expecting a PEM-formatted key.) � isinstance�ecdsaZ SigningKeyZ VerifyingKeyr r �encodeZfrom_pemZderZ UnexpectedDER� TypeError)r �keyr r r � prepare_key s zECAlgorithm.prepare_keyc C s |j || jtjjd�S )N)�hashfuncZ sigencode)�signr r �utilZsigencode_string)r �msgr r r r r 3 s zECAlgorithm.signc C s2 y|j ||| jtjjd�S tk r, dS X d S )N)r Z sigdecodeF)�verifyr r r Zsigdecode_string�AssertionError)r r r Zsigr r r r 7 s zECAlgorithm.verifyN)�__name__� __module__� __qualname__�__doc__�hashlibZsha256ZSHA256Zsha384ZSHA384Zsha512ZSHA512r r r r r r r r r s r )r r Zjwt.algorithmsr Z jwt.compatr r r r r r r �<module> s PK $]�ۤq q 6 contrib/algorithms/__pycache__/__init__.cpython-36.pycnu �[��� 3 �k�Z � @ s d S )N� r r r � /usr/lib/python3.6/__init__.py�<module> s PK $]�ۤq q < contrib/algorithms/__pycache__/__init__.cpython-36.opt-1.pycnu �[��� 3 �k�Z � @ s d S )N� r r r � /usr/lib/python3.6/__init__.py�<module> s PK $]wʸ]� � 6 contrib/algorithms/__pycache__/pycrypto.cpython-36.pycnu �[��� 3 �k�Z� � @ s` d dl Zd dlZd dlZd dlmZ d dlmZ d dlm Z d dl m Z m Z G dd� de �Z dS )� N)�RSA)� PKCS1_v1_5)� Algorithm)� string_types� text_typec @ sH e Zd ZdZejjZejjZejjZdd� Z dd� Z dd� Z dd � Z d S ) � RSAAlgorithmz� Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. This class requires PyCrypto package to be installed. This is based off of the implementation in PyJWT 0.3.2 c C s || _ d S )N)�hash_alg)�selfr � r � /usr/lib/python3.6/pycrypto.py�__init__ s zRSAAlgorithm.__init__c C sF t |tj�r|S t |t�r:t |t�r.|jd�}tj|�}ntd��|S )Nzutf-8z&Expecting a PEM- or RSA-formatted key.)� isinstancer Z_RSAobjr r �encodeZ importKey� TypeError)r �keyr r r � prepare_key s zRSAAlgorithm.prepare_keyc C s t j|�j| jj|��S )N)r �new�signr )r �msgr r r r r * s zRSAAlgorithm.signc C s t j|�j| jj|�|�S )N)r r �verifyr )r r r Zsigr r r r - s zRSAAlgorithm.verifyN) �__name__� __module__� __qualname__�__doc__�CryptoZHashZSHA256ZSHA384ZSHA512r r r r r r r r r s r )ZCrypto.Hash.SHA256r ZCrypto.Hash.SHA384ZCrypto.Hash.SHA512ZCrypto.PublicKeyr ZCrypto.Signaturer Zjwt.algorithmsr Z jwt.compatr r r r r r r �<module> s PK $]���� � < contrib/algorithms/__pycache__/py_ecdsa.cpython-36.opt-1.pycnu �[��� 3 �k�Z� � @ s@ d dl Z d dlZd dlmZ d dlmZmZ G dd� de�ZdS )� N)� Algorithm)� string_types� text_typec @ sB e Zd ZdZejZejZej Z dd� Z dd� Z dd� Z dd � Zd S ) � ECAlgorithmz� Performs signing and verification operations using ECDSA and the specified hash function This class requires the ecdsa package to be installed. This is based off of the implementation in PyJWT 0.3.2 c C s || _ d S )N)�hash_alg)�selfr � r � /usr/lib/python3.6/py_ecdsa.py�__init__ s zECAlgorithm.__init__c C s~ t |tj�st |tj�r |S t |t�rrt |t�r:|jd�}ytjj|�}W qz tjj k rn tjj|�}Y qzX nt d��|S )Nzutf-8z Expecting a PEM-formatted key.) � isinstance�ecdsaZ SigningKeyZ VerifyingKeyr r �encodeZfrom_pemZderZ UnexpectedDER� TypeError)r �keyr r r � prepare_key s zECAlgorithm.prepare_keyc C s |j || jtjjd�S )N)�hashfuncZ sigencode)�signr r �utilZsigencode_string)r �msgr r r r r 3 s zECAlgorithm.signc C s2 y|j ||| jtjjd�S tk r, dS X d S )N)r Z sigdecodeF)�verifyr r r Zsigdecode_string�AssertionError)r r r Zsigr r r r 7 s zECAlgorithm.verifyN)�__name__� __module__� __qualname__�__doc__�hashlibZsha256ZSHA256Zsha384ZSHA384Zsha512ZSHA512r r r r r r r r r s r )r r Zjwt.algorithmsr Z jwt.compatr r r r r r r �<module> s PK $]�{�� __init__.pynu �[��� # -*- coding: utf-8 -*- # flake8: noqa """ JSON Web Token implementation Minimum implementation based on this spec: http://self-issued.info/docs/draft-jones-json-web-token-01.html """ __title__ = 'pyjwt' __version__ = '1.6.1' __author__ = 'José Padilla' __license__ = 'MIT' __copyright__ = 'Copyright 2015 José Padilla' from .api_jwt import ( encode, decode, register_algorithm, unregister_algorithm, get_unverified_header, PyJWT ) from .api_jws import PyJWS from .exceptions import ( InvalidTokenError, DecodeError, InvalidAlgorithmError, InvalidAudienceError, ExpiredSignatureError, ImmatureSignatureError, InvalidIssuedAtError, InvalidIssuerError, ExpiredSignature, InvalidAudience, InvalidIssuer, MissingRequiredClaimError, InvalidSignatureError, ) PK $]r��� � api_jwt.pynu �[��� import json import warnings from calendar import timegm from collections import Iterable, Mapping from datetime import datetime, timedelta from .api_jws import PyJWS from .algorithms import Algorithm, get_default_algorithms # NOQA from .compat import string_types from .exceptions import ( DecodeError, ExpiredSignatureError, ImmatureSignatureError, InvalidAudienceError, InvalidIssuedAtError, InvalidIssuerError, MissingRequiredClaimError ) from .utils import merge_dict class PyJWT(PyJWS): header_type = 'JWT' @staticmethod def _get_default_options(): return { 'verify_signature': True, 'verify_exp': True, 'verify_nbf': True, 'verify_iat': True, 'verify_aud': True, 'verify_iss': True, 'require_exp': False, 'require_iat': False, 'require_nbf': False } def encode(self, payload, key, algorithm='HS256', headers=None, json_encoder=None): # Check that we get a mapping if not isinstance(payload, Mapping): raise TypeError('Expecting a mapping object, as JWT only supports ' 'JSON objects as payloads.') # Payload for time_claim in ['exp', 'iat', 'nbf']: # Convert datetime to a intDate value in known time-format claims if isinstance(payload.get(time_claim), datetime): payload[time_claim] = timegm(payload[time_claim].utctimetuple()) json_payload = json.dumps( payload, separators=(',', ':'), cls=json_encoder ).encode('utf-8') return super(PyJWT, self).encode( json_payload, key, algorithm, headers, json_encoder ) def decode(self, jwt, key='', verify=True, algorithms=None, options=None, **kwargs): if verify and not algorithms: warnings.warn( 'It is strongly recommended that you pass in a ' + 'value for the "algorithms" argument when calling decode(). ' + 'This argument will be mandatory in a future version.', DeprecationWarning ) payload, signing_input, header, signature = self._load(jwt) if options is None: options = {'verify_signature': verify} else: options.setdefault('verify_signature', verify) decoded = super(PyJWT, self).decode( jwt, key=key, algorithms=algorithms, options=options, **kwargs ) try: payload = json.loads(decoded.decode('utf-8')) except ValueError as e: raise DecodeError('Invalid payload string: %s' % e) if not isinstance(payload, Mapping): raise DecodeError('Invalid payload string: must be a json object') if verify: merged_options = merge_dict(self.options, options) self._validate_claims(payload, merged_options, **kwargs) return payload def _validate_claims(self, payload, options, audience=None, issuer=None, leeway=0, **kwargs): if 'verify_expiration' in kwargs: options['verify_exp'] = kwargs.get('verify_expiration', True) warnings.warn('The verify_expiration parameter is deprecated. ' 'Please use verify_exp in options instead.', DeprecationWarning) if isinstance(leeway, timedelta): leeway = leeway.total_seconds() if not isinstance(audience, (string_types, type(None), Iterable)): raise TypeError('audience must be a string, iterable, or None') self._validate_required_claims(payload, options) now = timegm(datetime.utcnow().utctimetuple()) if 'iat' in payload and options.get('verify_iat'): self._validate_iat(payload, now, leeway) if 'nbf' in payload and options.get('verify_nbf'): self._validate_nbf(payload, now, leeway) if 'exp' in payload and options.get('verify_exp'): self._validate_exp(payload, now, leeway) if options.get('verify_iss'): self._validate_iss(payload, issuer) if options.get('verify_aud'): self._validate_aud(payload, audience) def _validate_required_claims(self, payload, options): if options.get('require_exp') and payload.get('exp') is None: raise MissingRequiredClaimError('exp') if options.get('require_iat') and payload.get('iat') is None: raise MissingRequiredClaimError('iat') if options.get('require_nbf') and payload.get('nbf') is None: raise MissingRequiredClaimError('nbf') def _validate_iat(self, payload, now, leeway): try: int(payload['iat']) except ValueError: raise InvalidIssuedAtError('Issued At claim (iat) must be an integer.') def _validate_nbf(self, payload, now, leeway): try: nbf = int(payload['nbf']) except ValueError: raise DecodeError('Not Before claim (nbf) must be an integer.') if nbf > (now + leeway): raise ImmatureSignatureError('The token is not yet valid (nbf)') def _validate_exp(self, payload, now, leeway): try: exp = int(payload['exp']) except ValueError: raise DecodeError('Expiration Time claim (exp) must be an' ' integer.') if exp < (now - leeway): raise ExpiredSignatureError('Signature has expired') def _validate_aud(self, payload, audience): if audience is None and 'aud' not in payload: return if audience is not None and 'aud' not in payload: # Application specified an audience, but it could not be # verified since the token does not contain a claim. raise MissingRequiredClaimError('aud') if audience is None and 'aud' in payload: # Application did not specify an audience, but # the token has the 'aud' claim raise InvalidAudienceError('Invalid audience') audience_claims = payload['aud'] if isinstance(audience_claims, string_types): audience_claims = [audience_claims] if not isinstance(audience_claims, list): raise InvalidAudienceError('Invalid claim format in token') if any(not isinstance(c, string_types) for c in audience_claims): raise InvalidAudienceError('Invalid claim format in token') if isinstance(audience, string_types): audience = [audience] if not any(aud in audience_claims for aud in audience): raise InvalidAudienceError('Invalid audience') def _validate_iss(self, payload, issuer): if issuer is None: return if 'iss' not in payload: raise MissingRequiredClaimError('iss') if payload['iss'] != issuer: raise InvalidIssuerError('Invalid issuer') _jwt_global_obj = PyJWT() encode = _jwt_global_obj.encode decode = _jwt_global_obj.decode register_algorithm = _jwt_global_obj.register_algorithm unregister_algorithm = _jwt_global_obj.unregister_algorithm get_unverified_header = _jwt_global_obj.get_unverified_header PK $]V�oG- - __pycache__/utils.cpython-36.pycnu �[��� 3 �k�ZE � @ s� d dl Z d dlZd dlZddlmZmZmZ yd dlmZm Z W n e k rT Y nX dd� Z dd� Z d d � Z d d � Zd d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� ZdS )� N� )� binary_type�bytes_from_int� text_type)�decode_dss_signature�encode_dss_signaturec C s. t | t�r| jd�S t | t�r"| S td��d S )Nzutf-8zExpected a string value)� isinstancer �decoder � TypeError)�value� r �/usr/lib/python3.6/utils.py� force_unicode s r c C s. t | t�r| jd�S t | t�r"| S td��d S )Nzutf-8zExpected a string value)r r �encoder r )r r r r � force_bytes s r c C sB t | t�r| jd�} t| �d }|dkr8| dd| 7 } tj| �S )N�ascii� r � =)r r r �len�base64Zurlsafe_b64decode)�inputZremr r r �base64url_decode! s r c C s t j| �jdd�S )Nr � )r Zurlsafe_b64encode�replace)r r r r �base64url_encode- s r c C s0 | dk rt d��t| �}t|�dkr(d}t|�S )Nr zMust be a positive integer� )� ValueErrorr r r )�val� int_bytesr r r �to_base64url_uint1 s r c C sJ t | t�r| jd�} t| �}tjdt|� |�}tdjdd� |D ��d�S )Nr z%sB� c S s g | ] }d | �qS )z%02xr )�.0Zbyter r r � <listcomp>D s z'from_base64url_uint.<locals>.<listcomp>� ) r r r r �struct�unpackr �int�join)r �dataZbufr r r �from_base64url_uint= s r) c C sV |s| S y| j � }|j|� W n2 ttfk rP } ztd| ��W Y d d }~X nX |S )Nz-original and updates must be a dictionary: %s)�copy�update�AttributeErrorr r )ZoriginalZupdatesZmerged_options�er r r � merge_dictG s r. c C s$ dd| | f }t j|jd��}|S )Nz%0*x� r )�binasciiZa2b_hexr )Znum� num_bytesZ padded_hexZ big_endianr r r �number_to_bytesT s r2 c C s t tj| �d�S )Nr# )r& r0 Zb2a_hex)�stringr r r �bytes_to_numberZ s r4 c C s2 |j }|d d }t| �\}}t||�t||� S )N� � )�key_sizer r2 )Zder_sig�curve�num_bitsr1 �r�sr r r �der_to_raw_signature^ s r< c C sT |j }|d d }t| �d| kr*td��t| d |� �}t| |d � �}t||�S )Nr5 r6 r/ zInvalid signature)r7 r r r4 r )Zraw_sigr8 r9 r1 r: r; r r r �raw_to_der_signatureg s r= )r r0 r$ �compatr r r Z/cryptography.hazmat.primitives.asymmetric.utilsr r � ImportErrorr r r r r r) r. r2 r4 r< r= r r r r �<module> s$ PK $]�!W� # __pycache__/__init__.cpython-36.pycnu �[��� 3 �k�Z � @ s� d Z dZdZdZdZdZddlmZmZm Z m Z m Z m Z ddl mZ dd lmZmZmZmZmZmZmZmZmZmZmZmZm Z d S ) z� JSON Web Token implementation Minimum implementation based on this spec: http://self-issued.info/docs/draft-jones-json-web-token-01.html Zpyjwtz1.6.1u José PadillaZMITu Copyright 2015 José Padilla� )�encode�decode�register_algorithm�unregister_algorithm�get_unverified_header�PyJWT)�PyJWS) �InvalidTokenError� DecodeError�InvalidAlgorithmError�InvalidAudienceError�ExpiredSignatureError�ImmatureSignatureError�InvalidIssuedAtError�InvalidIssuerError�ExpiredSignature�InvalidAudience� InvalidIssuer�MissingRequiredClaimError�InvalidSignatureErrorN) �__doc__Z __title__� __version__� __author__Z __license__Z __copyright__Zapi_jwtr r r r r r Zapi_jwsr � exceptionsr r r r r r r r r r r r r � r r � /usr/lib/python3.6/__init__.py�<module> s PK $]�!W� ) __pycache__/__init__.cpython-36.opt-1.pycnu �[��� 3 �k�Z � @ s� d Z dZdZdZdZdZddlmZmZm Z m Z m Z m Z ddl mZ dd lmZmZmZmZmZmZmZmZmZmZmZmZm Z d S ) z� JSON Web Token implementation Minimum implementation based on this spec: http://self-issued.info/docs/draft-jones-json-web-token-01.html Zpyjwtz1.6.1u José PadillaZMITu Copyright 2015 José Padilla� )�encode�decode�register_algorithm�unregister_algorithm�get_unverified_header�PyJWT)�PyJWS) �InvalidTokenError� DecodeError�InvalidAlgorithmError�InvalidAudienceError�ExpiredSignatureError�ImmatureSignatureError�InvalidIssuedAtError�InvalidIssuerError�ExpiredSignature�InvalidAudience� InvalidIssuer�MissingRequiredClaimError�InvalidSignatureErrorN) �__doc__Z __title__� __version__� __author__Z __license__Z __copyright__Zapi_jwtr r r r r r Zapi_jwsr � exceptionsr r r r r r r r r r r r r � r r � /usr/lib/python3.6/__init__.py�<module> s PK $]M�?k k " __pycache__/api_jwt.cpython-36.pycnu �[��� 3 �k�Z� � @ s� d dl Z d dlZd dlmZ d dlmZmZ d dlmZmZ ddl m Z ddl m Z m Z ddlmZ dd lmZmZmZmZmZmZmZ dd lmZ G d d � d e �Ze� Zej Z ej Z ej Z ej Z ej Z dS ) � N)�timegm)�Iterable�Mapping)�datetime� timedelta� )�PyJWS)� Algorithm�get_default_algorithms)� string_types)� DecodeError�ExpiredSignatureError�ImmatureSignatureError�InvalidAudienceError�InvalidIssuedAtError�InvalidIssuerError�MissingRequiredClaimError)� merge_dictc sv e Zd ZdZedd� �Zd� fdd� Zd � fd d � Zd d d�Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Z� ZS ) �PyJWTZJWTc C s dddddddddd� S )NTF) �verify_signature� verify_exp� verify_nbf� verify_iat� verify_aud� verify_iss� require_exp� require_iat� require_nbf� r r r � /usr/lib/python3.6/api_jwt.py�_get_default_options s zPyJWT._get_default_options�HS256Nc sr t |t�std��x0d D ](}t |j|�t�rt|| j� �||< qW tj|d |d�j d�}t t | �j |||||�S ) NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.�exp�iat�nbf�,�:)Z separators�clszutf-8)r" r# r$ )r% r& ) � isinstancer � TypeError�getr r � utctimetuple�json�dumps�encode�superr )�self�payload�key� algorithmZheadersZ json_encoderZ time_claimZ json_payload)� __class__r r r. # s z PyJWT.encode� Tc s� |r| rt jd t� | j|�\}}} } |d kr:d|i}n |jd|� tt| �j|f|||d�|��} ytj | jd��}W n. t k r� } zt d| ��W Y d d } ~ X nX t |t �s�t d��|r�t| j|�} | j|| f|� |S ) Nz.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.r )r2 � algorithms�optionszutf-8zInvalid payload string: %sz-Invalid payload string: must be a json objectziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). z�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)�warnings�warn�DeprecationWarning�_load� setdefaultr/ r �decoder, �loads� ValueErrorr r( r r r7 �_validate_claims)r0 Zjwtr2 Zverifyr6 r7 �kwargsr1 Z signing_input�headerZ signatureZdecoded�eZmerged_options)r4 r r r= : s* z PyJWT.decoder c K s� d|kr$|j dd�|d< tjdt� t|t�r6|j� }t|ttd �t f�sRt d��| j ||� t t j� j� �}d|kr�|j d�r�| j|||� d|kr�|j d �r�| j|||� d |kr�|j d�r�| j|||� |j d �r�| j||� |j d �r�| j||� d S ) NZverify_expirationTr zXThe verify_expiration parameter is deprecated. Please use verify_exp in options instead.z,audience must be a string, iterable, or Noner# r r$ r r" r r )r* r8 r9 r: r( r Z total_secondsr �typer r) �_validate_required_claimsr r Zutcnowr+ � _validate_iat� _validate_nbf� _validate_exp� _validate_iss� _validate_aud)r0 r1 r7 �audience�issuer�leewayrA �nowr r r r@ ] s( zPyJWT._validate_claimsc C sd |j d�r |j d�d kr td��|j d�r@|j d�d kr@td��|j d�r`|j d�d kr`td��d S )Nr r" r r# r r$ )r* r )r0 r1 r7 r r r rE s z PyJWT._validate_required_claimsc C s2 yt |d � W n tk r, td��Y nX d S )Nr# z)Issued At claim (iat) must be an integer.)�intr? r )r0 r1 rN rM r r r rF � s zPyJWT._validate_iatc C sF yt |d �}W n tk r, td��Y nX ||| krBtd��d S )Nr$ z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rO r? r r )r0 r1 rN rM r$ r r r rG � s zPyJWT._validate_nbfc C sF yt |d �}W n tk r, td��Y nX ||| k rBtd��d S )Nr" z/Expiration Time claim (exp) must be an integer.zSignature has expired)rO r? r r )r0 r1 rN rM r" r r r rH � s zPyJWT._validate_expc s� |d krd|krd S |d k r,d|kr,t d��|d krDd|krDtd��|d � t� t�r\� g� t� t�sntd��tdd� � D ��r�td��t|t�r�|g}t� fdd�|D ��s�td��d S )N�audzInvalid audiencez Invalid claim format in tokenc s s | ]}t |t� V qd S )N)r( r )�.0�cr r r � <genexpr>� s z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s | ]}|� kV qd S )Nr )rQ rP )�audience_claimsr r rS � s )r r r( r �list�any)r0 r1 rK r )rT r rJ � s" zPyJWT._validate_audc C s4 |d kr d S d|kr t d��|d |kr0td��d S )NZisszInvalid issuer)r r )r0 r1 rL r r r rI � s zPyJWT._validate_iss)r! NN)r5 TNN)NNr )�__name__� __module__� __qualname__Z header_type� staticmethodr r. r= r@ rE rF rG rH rJ rI � __classcell__r r )r4 r r s # ! r )!r, r8 Zcalendarr � collectionsr r r r Zapi_jwsr r6 r r �compatr � exceptionsr r r r r r r Zutilsr r Z_jwt_global_objr. r= Zregister_algorithmZunregister_algorithmZget_unverified_headerr r r r �<module> s" $ 9PK $]8�愌 � ! __pycache__/compat.cpython-36.pycnu �[��� 3 �k�Z� � @ s� d Z ddlZddlZddlZejd dkZer8eZeZ ne ZeZ ee fZ y ej Z W n ek rn dd� Z Y nX eedd�r�dd� Znd d� ZdS ) z� The `compat` module provides support for backwards compatibility with older versions of python, and compatibility wrappers around optional packages. � N� c C sL t | �t |�krdS d}x*t| |�D ] \}}|t|�t|�A O }q$W |dkS )z� Returns True if the two strings are equal, False otherwise. The time taken is independent of the number of characters that match. Fr )�len�zip�ord)Zval1Zval2�result�x�y� r � /usr/lib/python3.6/compat.py�constant_time_compare s r �to_bytesc C s6 | }d}x |dkr$|d? }|d7 }q W | j |ddd�S )Nr � � ZbigF)Zsigned)r )�valZ remainingZ byte_lengthr r r �bytes_from_int. s r c C sF g }x | r$t | d�\} }|j|� qW |j� tjdt|� f|�� S )N� z%sB)�divmod�append�reverse�struct�packr )r ZbufZ remainderr r r r 8 s )�__doc__Zhmacr �sys� version_infoZPY3�strZ text_type�bytesZ binary_typeZunicodeZ string_typesZcompare_digestr �AttributeError�getattr�intr r r r r �<module> s" PK $]G.�X+ X+ + __pycache__/algorithms.cpython-36.opt-1.pycnu �[��� 3 �k�Z4 � @ s� d dl Z d dlZd dlZddlmZmZ ddlmZ ddlm Z m Z m Z m Z m Z mZmZmZ y�d dlmZ d dlmZmZmZ d dlmZmZmZmZm Z m Z m Z m Z d d l m!Z!m"Z" d d l#m$Z$m%Z% d d l&m'Z' d d l(m)Z) d Z*W n e+k r� dZ*Y nX e,ddddddddddg �Z-dd� Z.G dd � d e/�Z0G d d � d e0�Z1G d d � d e0�Z2e*�r�G d!d"� d"e0�Z3G d#d$� d$e0�Z4G d%d&� d&e3�Z5dS )'� N� )�constant_time_compare� string_types)�InvalidKeyError)�base64url_decode�base64url_encode�der_to_raw_signature� force_bytes� force_unicode�from_base64url_uint�raw_to_der_signature�to_base64url_uint)�hashes)�load_pem_private_key�load_pem_public_key�load_ssh_public_key)� RSAPrivateKey� RSAPublicKey�RSAPrivateNumbers�RSAPublicNumbers�rsa_recover_prime_factors� rsa_crt_dmp1� rsa_crt_dmq1� rsa_crt_iqmp)�EllipticCurvePrivateKey�EllipticCurvePublicKey)�ec�padding)�default_backend)�InvalidSignatureTF�RS256�RS384�RS512�ES256�ES384�ES521�ES512�PS256�PS384�PS512c C s� t � ttj�ttj�ttj�d�} tr�| jttj�ttj�ttj�ttj�ttj�ttj�ttj�t t j�t t j�t t j�d� � | S )zE Returns the algorithms that are implemented by the library. )ZnoneZHS256ZHS384ZHS512) r r! r" r# r$ r% r& r' r( r) ) � NoneAlgorithm� HMACAlgorithm�SHA256�SHA384�SHA512� has_crypto�update� RSAAlgorithm� ECAlgorithm�RSAPSSAlgorithm)Zdefault_algorithms� r4 � /usr/lib/python3.6/algorithms.py�get_default_algorithms& s" r6 c @ s@ e Zd ZdZdd� Zdd� Zdd� Zedd � �Zed d � �Z d S ) � AlgorithmzH The interface for an algorithm used to sign and verify tokens. c C s t �dS )z� Performs necessary validation and conversions on the key and returns the key value in the proper format for sign() and verify(). N)�NotImplementedError)�self�keyr4 r4 r5 � prepare_keyF s zAlgorithm.prepare_keyc C s t �dS )zn Returns a digital signature for the specified message using the specified key value. N)r8 )r9 �msgr: r4 r4 r5 �signM s zAlgorithm.signc C s t �dS )zz Verifies that the specified digital signature is valid for the specified message and key values. N)r8 )r9 r< r: �sigr4 r4 r5 �verifyT s zAlgorithm.verifyc C s t �dS )z7 Serializes a given RSA key into a JWK N)r8 )�key_objr4 r4 r5 �to_jwk[ s zAlgorithm.to_jwkc C s t �dS )zb Deserializes a given RSA key from JWK back into a PublicKey or PrivateKey object N)r8 )�jwkr4 r4 r5 �from_jwkb s zAlgorithm.from_jwkN) �__name__� __module__� __qualname__�__doc__r; r= r? � staticmethodrA rC r4 r4 r4 r5 r7 B s r7 c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) r* zZ Placeholder for use when no signing or verification operations are required. c C s |dkr d }|d k r t d��|S )N� z*When alg = "none", key value must be None.)r )r9 r: r4 r4 r5 r; o s zNoneAlgorithm.prepare_keyc C s dS )N� r4 )r9 r< r: r4 r4 r5 r= x s zNoneAlgorithm.signc C s dS )NFr4 )r9 r< r: r> r4 r4 r5 r? { s zNoneAlgorithm.verifyN)rD rE rF rG r; r= r? r4 r4 r4 r5 r* j s r* c @ sZ e Zd ZdZejZejZej Z dd� Z dd� Z e dd� �Ze dd � �Zd d � Zd d � ZdS )r+ zf Performs signing and verification operations using HMAC and the specified hash function. c C s || _ d S )N)�hash_alg)r9 rK r4 r4 r5 �__init__� s zHMACAlgorithm.__init__c s6 t � �� ddddg}t� fdd�|D ��r2td��� S )Ns -----BEGIN PUBLIC KEY-----s -----BEGIN CERTIFICATE-----s -----BEGIN RSA PUBLIC KEY-----s ssh-rsac s g | ] }|� k�qS r4 r4 )�.0Z string_value)r: r4 r5 � <listcomp>� s z-HMACAlgorithm.prepare_key.<locals>.<listcomp>zdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r �anyr )r9 r: Zinvalid_stringsr4 )r: r5 r; � s zHMACAlgorithm.prepare_keyc C s t jttt| ���dd��S )N�oct)�k�kty)�json�dumpsr r r )r@ r4 r4 r5 rA � s zHMACAlgorithm.to_jwkc C s, t j| �}|jd�dkr td��t|d �S )NrR rP zNot an HMAC keyrQ )rS �loads�getr r )rB �objr4 r4 r5 rC � s zHMACAlgorithm.from_jwkc C s t j||| j�j� S )N)�hmac�newrK Zdigest)r9 r< r: r4 r4 r5 r= � s zHMACAlgorithm.signc C s t || j||��S )N)r r= )r9 r< r: r> r4 r4 r5 r? � s zHMACAlgorithm.verifyN)rD rE rF rG �hashlibZsha256r, Zsha384r- Zsha512r. rL r; rH rA rC r= r? r4 r4 r4 r5 r+ s r+ c @ sZ e Zd ZdZejZejZejZdd� Zdd� Z e dd� �Z e dd � �Z d d � Z d d � ZdS )r1 z~ Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. c C s || _ d S )N)rK )r9 rK r4 r4 r5 rL � s zRSAAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r~t|�}y.|jd�rFt|t� d�}nt|d t� d�}W q� t k rz t |t� d�}Y q�X nt d��|S )Ns ssh-rsa)�backend)�passwordr[ z Expecting a PEM-formatted key.) � isinstancer r r r � startswithr r r � ValueErrorr � TypeError)r9 r: r4 r4 r5 r; � s zRSAAlgorithm.prepare_keyc C s� d }t | dd �r�| j� }ddgtt|jj��tt|jj��tt|j��tt|j��tt|j ��tt|j ��tt|j ��tt|j ��d� }nBt | dd �r�| j� }ddgtt|j��tt|j��d�}nt d��tj|�S )N�private_numbers�RSAr= ) rR �key_ops�n�e�d�p�q�dp�dq�qir? )rR rc rd re zNot a public or private key)�getattrra r r �public_numbersrd re rf rg rh �dmp1�dmq1�iqmpr rS rT )r@ rW �numbersr4 r4 r5 rA � s* zRSAAlgorithm.to_jwkc s� yt j| �� W n tk r* td��Y nX � jd�dkrBtd��d� koXd� koXd� k�rfd� krltd ��d d d d dg}� fdd�|D �}t|�}|r�t|� r�td��tt� d �t� d ��}|�rt t� d �t� d �t� d �t� d �t� d �t� d �|d�}nHt� d �}t |j ||j �\}}t |||t ||�t||�t||�|d�}|jt� �S d� k�r�d� k�r�tt� d �t� d ��}|jt� �S td��d S )NzKey is not valid JSONrR rb zNot an RSA keyrf re rd Zothz5Unsupported RSA private key: > 2 primes not supportedrg rh ri rj rk c s g | ] }|� k�qS r4 r4 )rM Zprop)rW r4 r5 rN s z)RSAAlgorithm.from_jwk.<locals>.<listcomp>z@RSA key must include all parameters if any are present besides d)rf rg rh rn ro rp rm zNot a public or private key)rS rU r_ r rV rO �allr r r r rd re r r r Z private_keyr Z public_key) rB Z other_propsZ props_foundZany_props_foundrm rq rf rg rh r4 )rW r5 rC � sT zRSAAlgorithm.from_jwkc C s |j |tj� | j� �S )N)r= r �PKCS1v15rK )r9 r< r: r4 r4 r5 r= 8 s zRSAAlgorithm.signc C s6 y |j ||tj� | j� � dS tk r0 dS X d S )NTF)r? r rs rK r )r9 r< r: r> r4 r4 r5 r? ; s zRSAAlgorithm.verifyN)rD rE rF rG r r, r- r. rL r; rH rA rC r= r? r4 r4 r4 r5 r1 � s $ ?r1 c @ sB e Zd ZdZejZejZejZdd� Zdd� Z dd� Z dd � Z d S ) r2 zr Performs signing and verification operations using ECDSA and the specified hash function c C s || _ d S )N)rK )r9 rK r4 r4 r5 rL K s zECAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r~t|�}y,|jd�rFt|t� d�}nt|t� d�}W q� t k rz t |d t� d�}Y q�X nt d��|S )Ns ecdsa-sha2-)r[ )r\ r[ z Expecting a PEM-formatted key.) r] r r r r r^ r r r r_ r r` )r9 r: r4 r4 r5 r; N s zECAlgorithm.prepare_keyc C s" |j |tj| j� ��}t||j�S )N)r= r �ECDSArK r �curve)r9 r< r: �der_sigr4 r4 r5 r= f s zECAlgorithm.signc C s\ yt ||j�}W n tk r$ dS X y |j||tj| j� �� dS tk rV dS X d S )NFT)r ru r_ r? r rt rK r )r9 r< r: r> rv r4 r4 r5 r? k s zECAlgorithm.verifyN) rD rE rF rG r r, r- r. rL r; r= r? r4 r4 r4 r5 r2 B s r2 c @ s e Zd ZdZdd� Zdd� ZdS )r3 zA Performs a signature using RSASSA-PSS with MGF1 c C s* |j |tjtj| j� �| jjd�| j� �S )N)�mgf� salt_length)r= r �PSS�MGF1rK � digest_size)r9 r< r: r4 r4 r5 r= | s zRSAPSSAlgorithm.signc C sJ y0|j ||tjtj| j� �| jjd�| j� � dS tk rD dS X d S )N)rw rx TF)r? r ry rz rK r{ r )r9 r< r: r> r4 r4 r5 r? � s zRSAPSSAlgorithm.verifyN)rD rE rF rG r= r? r4 r4 r4 r5 r3 w s r3 )6rZ rX rS �compatr r � exceptionsr Zutilsr r r r r r r r Z cryptography.hazmat.primitivesr Z,cryptography.hazmat.primitives.serializationr r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r r r r Z,cryptography.hazmat.primitives.asymmetric.ecr r Z)cryptography.hazmat.primitives.asymmetricr r Z cryptography.hazmat.backendsr Zcryptography.exceptionsr r/ � ImportError�setZrequires_cryptographyr6 �objectr7 r* r+ r1 r2 r3 r4 r4 r4 r5 �<module> s6 ( ( (4 5PK $]܄�J6 6 % __pycache__/exceptions.cpython-36.pycnu �[��� 3 �k�Z~ � @ s� G d d� de �ZG dd� de�ZG dd� de�ZG dd� de�ZG dd � d e�ZG d d � d e�ZG d d � d e�ZG dd� de�ZG dd� de �Z G dd� de�Z G dd� de�Z eZ eZ eZdS )c @ s e Zd ZdS )�InvalidTokenErrorN)�__name__� __module__� __qualname__� r r � /usr/lib/python3.6/exceptions.pyr s r c @ s e Zd ZdS )� DecodeErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidSignatureErrorN)r r r r r r r r s r c @ s e Zd ZdS )�ExpiredSignatureErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidAudienceErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidIssuerErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidIssuedAtErrorN)r r r r r r r r s r c @ s e Zd ZdS )�ImmatureSignatureErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidKeyErrorN)r r r r r r r r ! s r c @ s e Zd ZdS )�InvalidAlgorithmErrorN)r r r r r r r r % s r c @ s e Zd Zdd� Zdd� ZdS )�MissingRequiredClaimErrorc C s || _ d S )N)�claim)�selfr r r r �__init__* s z"MissingRequiredClaimError.__init__c C s d| j S )Nz Token is missing the "%s" claim)r )r r r r �__str__- s z!MissingRequiredClaimError.__str__N)r r r r r r r r r r ) s r N)� Exceptionr r r r r r r r r r r ZExpiredSignatureZInvalidAudienceZ InvalidIssuerr r r r �<module> s PK $]K�s� � ) __pycache__/__main__.cpython-36.opt-1.pycnu �[��� 3 �k�Z� � @ sl d dl mZmZ d dlZd dlZd dlZd dlZddlmZm Z m Z m Z dd� Z dd� Z d d � Zd d � ZdS ) � )�absolute_import�print_functionN� )� DecodeError� __version__�decode�encodec C s� | j d krtd��i }x�| jD ]�}|jdd�\}}|dkrr|d dkrrt|�dkrrtttj� t|dd � � ��}|j� r�t|�}n"y t |�}W n tk r� Y nX ddd d �}||kr�|| }|||< q W t || j | j d �}|j d �S ) Nz4Key is required when encoding. See --help for usage.�=r Zexpr �+TF)�trueZfalseZnull)�key� algorithmzutf-8) r � ValueError�payload�split�len�str�int�time�isdigit�floatr r r )�argsr �arg�k�vZ constants�token� r � /usr/lib/python3.6/__main__.py�encode_payload s, r c C s� yV| j r| j }n"tjj� r*tjj� j� }ntd��|jd�}t|| j | j d�}t j |�S t k r� } zt d| ��W Y d d }~X nX d S )Nz*Cannot read from stdin: terminal not a TTYzutf-8)r �verifyz)There was an error decoding the token: %s)r �sys�stdin�isatty�readline�strip�IOErrorr r r r �json�dumpsr )r r �data�er r r �decode_payload7 s r* c C s� d} t jd| d�}|jddddt d� |jd d d d d d � |jdddddd � |jdddd�}|jddd�}d}|jdd |d � |jtd � |jd d d�}|jd!d"d#d$� |jd%d&d'd(d)d*d+� |jtd � |S ),Na Encodes or decodes JSON Web Tokens based on input. %(prog)s [options] <command> [options] input Decoding examples: %(prog)s --key=secret decode json.web.token %(prog)s decode --no-verify json.web.token Encoding requires the key option and takes space separated key/value pairs separated by equals (=) as input. Examples: %(prog)s --key=secret encode iss=me exp=1302049071 %(prog)s --key=secret encode foo=bar exp=+10 The exp key is special and can take an offset to current Unix time. Zpyjwt)�prog�usagez-vz --version�versionz %(prog)s )�actionr- z--keyr ZKEYz set the secret key to sign with)�dest�metavar�default�helpz--algr ZALGZHS256z0set crypto algorithm to sign with. default=HS256zPyJWT subcommandszvalid subcommandszadditional help)�title� descriptionr2 r z use to encode a supplied payload)r2 zfPayload to encode. Must be a space separated list of key/value pairs separated by equals (=) sign.r r )�nargsr2 )�funcr z'use to decode a supplied JSON web tokenr zJSON web token to decode.�?)r2 r5 z-nz --no-verifyZ store_falser Tz2ignore signature and claims verification on decode)r. r/ r1 r2 ) �argparse�ArgumentParser� add_argumentr Zadd_subparsersZ add_parserZ set_defaultsr r* )r, � arg_parserZ subparsersZ encode_parserZ payload_helpZ decode_parserr r r �build_argparserJ sR r< c C sj t � } y*| jtjdd � �}|j|�}t|� W n4 tk rd } ztd|� | j� W Y d d }~X nX d S )Nr z There was an unforseen error: )r< � parse_argsr �argvr6 �print� ExceptionZ print_help)r; Z arguments�outputr) r r r �main� s rB )Z __future__r r r8 r& r r � r r r r r r* r< rB r r r r �<module> s *SPK $]G.�X+ X+ % __pycache__/algorithms.cpython-36.pycnu �[��� 3 �k�Z4 � @ s� d dl Z d dlZd dlZddlmZmZ ddlmZ ddlm Z m Z m Z m Z m Z mZmZmZ y�d dlmZ d dlmZmZmZ d dlmZmZmZmZm Z m Z m Z m Z d d l m!Z!m"Z" d d l#m$Z$m%Z% d d l&m'Z' d d l(m)Z) d Z*W n e+k r� dZ*Y nX e,ddddddddddg �Z-dd� Z.G dd � d e/�Z0G d d � d e0�Z1G d d � d e0�Z2e*�r�G d!d"� d"e0�Z3G d#d$� d$e0�Z4G d%d&� d&e3�Z5dS )'� N� )�constant_time_compare� string_types)�InvalidKeyError)�base64url_decode�base64url_encode�der_to_raw_signature� force_bytes� force_unicode�from_base64url_uint�raw_to_der_signature�to_base64url_uint)�hashes)�load_pem_private_key�load_pem_public_key�load_ssh_public_key)� RSAPrivateKey� RSAPublicKey�RSAPrivateNumbers�RSAPublicNumbers�rsa_recover_prime_factors� rsa_crt_dmp1� rsa_crt_dmq1� rsa_crt_iqmp)�EllipticCurvePrivateKey�EllipticCurvePublicKey)�ec�padding)�default_backend)�InvalidSignatureTF�RS256�RS384�RS512�ES256�ES384�ES521�ES512�PS256�PS384�PS512c C s� t � ttj�ttj�ttj�d�} tr�| jttj�ttj�ttj�ttj�ttj�ttj�ttj�t t j�t t j�t t j�d� � | S )zE Returns the algorithms that are implemented by the library. )ZnoneZHS256ZHS384ZHS512) r r! r" r# r$ r% r& r' r( r) ) � NoneAlgorithm� HMACAlgorithm�SHA256�SHA384�SHA512� has_crypto�update� RSAAlgorithm� ECAlgorithm�RSAPSSAlgorithm)Zdefault_algorithms� r4 � /usr/lib/python3.6/algorithms.py�get_default_algorithms& s" r6 c @ s@ e Zd ZdZdd� Zdd� Zdd� Zedd � �Zed d � �Z d S ) � AlgorithmzH The interface for an algorithm used to sign and verify tokens. c C s t �dS )z� Performs necessary validation and conversions on the key and returns the key value in the proper format for sign() and verify(). N)�NotImplementedError)�self�keyr4 r4 r5 � prepare_keyF s zAlgorithm.prepare_keyc C s t �dS )zn Returns a digital signature for the specified message using the specified key value. N)r8 )r9 �msgr: r4 r4 r5 �signM s zAlgorithm.signc C s t �dS )zz Verifies that the specified digital signature is valid for the specified message and key values. N)r8 )r9 r< r: �sigr4 r4 r5 �verifyT s zAlgorithm.verifyc C s t �dS )z7 Serializes a given RSA key into a JWK N)r8 )�key_objr4 r4 r5 �to_jwk[ s zAlgorithm.to_jwkc C s t �dS )zb Deserializes a given RSA key from JWK back into a PublicKey or PrivateKey object N)r8 )�jwkr4 r4 r5 �from_jwkb s zAlgorithm.from_jwkN) �__name__� __module__� __qualname__�__doc__r; r= r? � staticmethodrA rC r4 r4 r4 r5 r7 B s r7 c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) r* zZ Placeholder for use when no signing or verification operations are required. c C s |dkr d }|d k r t d��|S )N� z*When alg = "none", key value must be None.)r )r9 r: r4 r4 r5 r; o s zNoneAlgorithm.prepare_keyc C s dS )N� r4 )r9 r< r: r4 r4 r5 r= x s zNoneAlgorithm.signc C s dS )NFr4 )r9 r< r: r> r4 r4 r5 r? { s zNoneAlgorithm.verifyN)rD rE rF rG r; r= r? r4 r4 r4 r5 r* j s r* c @ sZ e Zd ZdZejZejZej Z dd� Z dd� Z e dd� �Ze dd � �Zd d � Zd d � ZdS )r+ zf Performs signing and verification operations using HMAC and the specified hash function. c C s || _ d S )N)�hash_alg)r9 rK r4 r4 r5 �__init__� s zHMACAlgorithm.__init__c s6 t � �� ddddg}t� fdd�|D ��r2td��� S )Ns -----BEGIN PUBLIC KEY-----s -----BEGIN CERTIFICATE-----s -----BEGIN RSA PUBLIC KEY-----s ssh-rsac s g | ] }|� k�qS r4 r4 )�.0Z string_value)r: r4 r5 � <listcomp>� s z-HMACAlgorithm.prepare_key.<locals>.<listcomp>zdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r �anyr )r9 r: Zinvalid_stringsr4 )r: r5 r; � s zHMACAlgorithm.prepare_keyc C s t jttt| ���dd��S )N�oct)�k�kty)�json�dumpsr r r )r@ r4 r4 r5 rA � s zHMACAlgorithm.to_jwkc C s, t j| �}|jd�dkr td��t|d �S )NrR rP zNot an HMAC keyrQ )rS �loads�getr r )rB �objr4 r4 r5 rC � s zHMACAlgorithm.from_jwkc C s t j||| j�j� S )N)�hmac�newrK Zdigest)r9 r< r: r4 r4 r5 r= � s zHMACAlgorithm.signc C s t || j||��S )N)r r= )r9 r< r: r> r4 r4 r5 r? � s zHMACAlgorithm.verifyN)rD rE rF rG �hashlibZsha256r, Zsha384r- Zsha512r. rL r; rH rA rC r= r? r4 r4 r4 r5 r+ s r+ c @ sZ e Zd ZdZejZejZejZdd� Zdd� Z e dd� �Z e dd � �Z d d � Z d d � ZdS )r1 z~ Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. c C s || _ d S )N)rK )r9 rK r4 r4 r5 rL � s zRSAAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r~t|�}y.|jd�rFt|t� d�}nt|d t� d�}W q� t k rz t |t� d�}Y q�X nt d��|S )Ns ssh-rsa)�backend)�passwordr[ z Expecting a PEM-formatted key.) � isinstancer r r r � startswithr r r � ValueErrorr � TypeError)r9 r: r4 r4 r5 r; � s zRSAAlgorithm.prepare_keyc C s� d }t | dd �r�| j� }ddgtt|jj��tt|jj��tt|j��tt|j��tt|j ��tt|j ��tt|j ��tt|j ��d� }nBt | dd �r�| j� }ddgtt|j��tt|j��d�}nt d��tj|�S )N�private_numbers�RSAr= ) rR �key_ops�n�e�d�p�q�dp�dq�qir? )rR rc rd re zNot a public or private key)�getattrra r r �public_numbersrd re rf rg rh �dmp1�dmq1�iqmpr rS rT )r@ rW �numbersr4 r4 r5 rA � s* zRSAAlgorithm.to_jwkc s� yt j| �� W n tk r* td��Y nX � jd�dkrBtd��d� koXd� koXd� k�rfd� krltd ��d d d d dg}� fdd�|D �}t|�}|r�t|� r�td��tt� d �t� d ��}|�rt t� d �t� d �t� d �t� d �t� d �t� d �|d�}nHt� d �}t |j ||j �\}}t |||t ||�t||�t||�|d�}|jt� �S d� k�r�d� k�r�tt� d �t� d ��}|jt� �S td��d S )NzKey is not valid JSONrR rb zNot an RSA keyrf re rd Zothz5Unsupported RSA private key: > 2 primes not supportedrg rh ri rj rk c s g | ] }|� k�qS r4 r4 )rM Zprop)rW r4 r5 rN s z)RSAAlgorithm.from_jwk.<locals>.<listcomp>z@RSA key must include all parameters if any are present besides d)rf rg rh rn ro rp rm zNot a public or private key)rS rU r_ r rV rO �allr r r r rd re r r r Z private_keyr Z public_key) rB Z other_propsZ props_foundZany_props_foundrm rq rf rg rh r4 )rW r5 rC � sT zRSAAlgorithm.from_jwkc C s |j |tj� | j� �S )N)r= r �PKCS1v15rK )r9 r< r: r4 r4 r5 r= 8 s zRSAAlgorithm.signc C s6 y |j ||tj� | j� � dS tk r0 dS X d S )NTF)r? r rs rK r )r9 r< r: r> r4 r4 r5 r? ; s zRSAAlgorithm.verifyN)rD rE rF rG r r, r- r. rL r; rH rA rC r= r? r4 r4 r4 r5 r1 � s $ ?r1 c @ sB e Zd ZdZejZejZejZdd� Zdd� Z dd� Z dd � Z d S ) r2 zr Performs signing and verification operations using ECDSA and the specified hash function c C s || _ d S )N)rK )r9 rK r4 r4 r5 rL K s zECAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r~t|�}y,|jd�rFt|t� d�}nt|t� d�}W q� t k rz t |d t� d�}Y q�X nt d��|S )Ns ecdsa-sha2-)r[ )r\ r[ z Expecting a PEM-formatted key.) r] r r r r r^ r r r r_ r r` )r9 r: r4 r4 r5 r; N s zECAlgorithm.prepare_keyc C s" |j |tj| j� ��}t||j�S )N)r= r �ECDSArK r �curve)r9 r< r: �der_sigr4 r4 r5 r= f s zECAlgorithm.signc C s\ yt ||j�}W n tk r$ dS X y |j||tj| j� �� dS tk rV dS X d S )NFT)r ru r_ r? r rt rK r )r9 r< r: r> rv r4 r4 r5 r? k s zECAlgorithm.verifyN) rD rE rF rG r r, r- r. rL r; r= r? r4 r4 r4 r5 r2 B s r2 c @ s e Zd ZdZdd� Zdd� ZdS )r3 zA Performs a signature using RSASSA-PSS with MGF1 c C s* |j |tjtj| j� �| jjd�| j� �S )N)�mgf� salt_length)r= r �PSS�MGF1rK � digest_size)r9 r< r: r4 r4 r5 r= | s zRSAPSSAlgorithm.signc C sJ y0|j ||tjtj| j� �| jjd�| j� � dS tk rD dS X d S )N)rw rx TF)r? r ry rz rK r{ r )r9 r< r: r> r4 r4 r5 r? � s zRSAPSSAlgorithm.verifyN)rD rE rF rG r= r? r4 r4 r4 r5 r3 w s r3 )6rZ rX rS �compatr r � exceptionsr Zutilsr r r r r r r r Z cryptography.hazmat.primitivesr Z,cryptography.hazmat.primitives.serializationr r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r r r r Z,cryptography.hazmat.primitives.asymmetric.ecr r Z)cryptography.hazmat.primitives.asymmetricr r Z cryptography.hazmat.backendsr Zcryptography.exceptionsr r/ � ImportError�setZrequires_cryptographyr6 �objectr7 r* r+ r1 r2 r3 r4 r4 r4 r5 �<module> s6 ( ( (4 5PK $]8�愌 � ' __pycache__/compat.cpython-36.opt-1.pycnu �[��� 3 �k�Z� � @ s� d Z ddlZddlZddlZejd dkZer8eZeZ ne ZeZ ee fZ y ej Z W n ek rn dd� Z Y nX eedd�r�dd� Znd d� ZdS ) z� The `compat` module provides support for backwards compatibility with older versions of python, and compatibility wrappers around optional packages. � N� c C sL t | �t |�krdS d}x*t| |�D ] \}}|t|�t|�A O }q$W |dkS )z� Returns True if the two strings are equal, False otherwise. The time taken is independent of the number of characters that match. Fr )�len�zip�ord)Zval1Zval2�result�x�y� r � /usr/lib/python3.6/compat.py�constant_time_compare s r �to_bytesc C s6 | }d}x |dkr$|d? }|d7 }q W | j |ddd�S )Nr � � ZbigF)Zsigned)r )�valZ remainingZ byte_lengthr r r �bytes_from_int. s r c C sF g }x | r$t | d�\} }|j|� qW |j� tjdt|� f|�� S )N� z%sB)�divmod�append�reverse�struct�packr )r ZbufZ remainderr r r r 8 s )�__doc__Zhmacr �sys� version_infoZPY3�strZ text_type�bytesZ binary_typeZunicodeZ string_typesZcompare_digestr �AttributeError�getattr�intr r r r r �<module> s" PK $]�,r�� � ( __pycache__/api_jws.cpython-36.opt-1.pycnu �[��� 3 �k�Z� � @ s� d dl Z d dlZd dlZd dlmZ ddlmZmZmZm Z ddl m Z m Z m Z ddlmZmZmZmZ ddlmZmZmZmZ G dd � d e�Ze� ZejZej Z ej Z ej Z ej Z dS ) � N)�Mapping� )� Algorithm�get_default_algorithms� has_crypto�requires_cryptography)� binary_type� string_types� text_type)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encode� force_bytes� merge_dictc @ s| e Zd ZdZd dd�Zedd� �Zdd� Zd d � Zd d � Z d dd�Z d dd�Z dd� Z dd� Z d!dd�Zdd� Zd d � ZdS )"�PyJWSZJWTNc C sj t � | _|d k rt|�nt| j�| _x(t| jj� �D ]}|| jkr4| j|= q4W |sVi }t| j� |�| _d S )N) r � _algorithms�set� _valid_algs�list�keysr �_get_default_options�options)�self� algorithmsr �key� r � /usr/lib/python3.6/api_jws.py�__init__ s zPyJWS.__init__c C s ddiS )N�verify_signatureTr r r r r r # s zPyJWS._get_default_optionsc C s> || j krtd��t|t�s$td��|| j |< | jj|� dS )zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r � ValueError� isinstancer � TypeErrorr �add)r �alg_id�alg_objr r r �register_algorithm) s zPyJWS.register_algorithmc C s* || j krtd��| j |= | jj|� dS )z� Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r& r r r �unregister_algorithm6 s zPyJWS.unregister_algorithmc C s t | j�S )zM Returns a list of supported values for the 'alg' parameter. )r r )r r r r �get_algorithmsB s zPyJWS.get_algorithms�HS256c C s� g }|d krd}|| j kr| j|d�}|r>| j|� |j|� ttj|d |d��}|jt|�� |jt|�� dj |�} y$| j | } | j |�}| j | |�} W n8 t k r� t r�|tkr�td| ��ntd��Y nX |jt| �� dj |�S ) NZnone)�typ�alg�,�:)Z separators�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supported)r0 r1 )r � header_typ�_validate_headers�updater �json�dumps�appendr �joinr � prepare_keyZsignr) r r �NotImplementedError) r �payloadr � algorithm�headersZ json_encoderZsegments�headerZ json_header� signing_inputr' � signaturer r r �encodeH s8 z PyJWS.encode� Tc K sn t | j|�}|d }|r*| r*tjd t� | j|�\} } } } |sRtjdtdd� n|rj| j| | | | ||� | S ) Nr! z.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.zSThe verify parameter is deprecated. Please use verify_signature in options instead.� )� stacklevelziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). z�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)r r �warnings�warn�DeprecationWarning�_load�_verify_signature) r Zjwsr �verifyr r �kwargsZmerged_optionsr! r= rA r@ rB r r r �decodex s z PyJWS.decodec C s | j |�d }| j|� |S )z�Returns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete rE )rJ r5 )r �jwtr? r r r �get_unverified_header� s zPyJWS.get_unverified_headerc 2 C sh t |t�r|jd�}tt|�t�s0tdjt���y$|jdd�\}}|j dd�\}}W n t k rp td��Y nX y t |�}W n" t t jfk r� td��Y nX ytj|jd��}W n. t k r� } ztd| ��W Y d d }~X nX t |t�s�td��y t |�} W n$ t t jfk �r( td ��Y nX y t |�} W n$ t t jfk �rZ td ��Y nX | ||| fS ) Nzutf-8z'Invalid token type. Token must be a {0}r3 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r# r rC � issubclass�typer r �format�rsplit�splitr" r r$ �binascii�Errorr7 �loadsrN r ) r rO rA Zcrypto_segmentZheader_segmentZpayload_segmentZ header_datar@ �er= rB r r r rJ � s: z PyJWS._loadc C sr |j d�}|d k r"||kr"td��y.| j| }|j|�}|j|||�sNtd��W n tk rl td��Y nX d S )Nr/ z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)�getr r r; rL r r) ) r r= rA r@ rB r r r/ r' r r r rK � s zPyJWS._verify_signaturec C s d|kr| j |d � d S )N�kid)� _validate_kid)r r? r r r r5 � s zPyJWS._validate_headersc C s t |t�std��d S )Nz(Key ID header parameter must be a string)r# r r )r r[ r r r r\ � s zPyJWS._validate_kid)NN)r- NN)rD TNN)rD N)�__name__� __module__� __qualname__r4 r � staticmethodr r( r+ r, rC rN rP rJ rK r5 r\ r r r r r s / ( r ) rV r7 rG � collectionsr r r r r r �compatr r r � exceptionsr r r r Zutilsr r r r �objectr Z_jws_global_objrC rN r( r+ rP r r r r �<module> s OPK $]K�s� � # __pycache__/__main__.cpython-36.pycnu �[��� 3 �k�Z� � @ sl d dl mZmZ d dlZd dlZd dlZd dlZddlmZm Z m Z m Z dd� Z dd� Z d d � Zd d � ZdS ) � )�absolute_import�print_functionN� )� DecodeError� __version__�decode�encodec C s� | j d krtd��i }x�| jD ]�}|jdd�\}}|dkrr|d dkrrt|�dkrrtttj� t|dd � � ��}|j� r�t|�}n"y t |�}W n tk r� Y nX ddd d �}||kr�|| }|||< q W t || j | j d �}|j d �S ) Nz4Key is required when encoding. See --help for usage.�=r Zexpr �+TF)�trueZfalseZnull)�key� algorithmzutf-8) r � ValueError�payload�split�len�str�int�time�isdigit�floatr r r )�argsr �arg�k�vZ constants�token� r � /usr/lib/python3.6/__main__.py�encode_payload s, r c C s� yV| j r| j }n"tjj� r*tjj� j� }ntd��|jd�}t|| j | j d�}t j |�S t k r� } zt d| ��W Y d d }~X nX d S )Nz*Cannot read from stdin: terminal not a TTYzutf-8)r �verifyz)There was an error decoding the token: %s)r �sys�stdin�isatty�readline�strip�IOErrorr r r r �json�dumpsr )r r �data�er r r �decode_payload7 s r* c C s� d} t jd| d�}|jddddt d� |jd d d d d d � |jdddddd � |jdddd�}|jddd�}d}|jdd |d � |jtd � |jd d d�}|jd!d"d#d$� |jd%d&d'd(d)d*d+� |jtd � |S ),Na Encodes or decodes JSON Web Tokens based on input. %(prog)s [options] <command> [options] input Decoding examples: %(prog)s --key=secret decode json.web.token %(prog)s decode --no-verify json.web.token Encoding requires the key option and takes space separated key/value pairs separated by equals (=) as input. Examples: %(prog)s --key=secret encode iss=me exp=1302049071 %(prog)s --key=secret encode foo=bar exp=+10 The exp key is special and can take an offset to current Unix time. Zpyjwt)�prog�usagez-vz --version�versionz %(prog)s )�actionr- z--keyr ZKEYz set the secret key to sign with)�dest�metavar�default�helpz--algr ZALGZHS256z0set crypto algorithm to sign with. default=HS256zPyJWT subcommandszvalid subcommandszadditional help)�title� descriptionr2 r z use to encode a supplied payload)r2 zfPayload to encode. Must be a space separated list of key/value pairs separated by equals (=) sign.r r )�nargsr2 )�funcr z'use to decode a supplied JSON web tokenr zJSON web token to decode.�?)r2 r5 z-nz --no-verifyZ store_falser Tz2ignore signature and claims verification on decode)r. r/ r1 r2 ) �argparse�ArgumentParser� add_argumentr Zadd_subparsersZ add_parserZ set_defaultsr r* )r, � arg_parserZ subparsersZ encode_parserZ payload_helpZ decode_parserr r r �build_argparserJ sR r< c C sj t � } y*| jtjdd � �}|j|�}t|� W n4 tk rd } ztd|� | j� W Y d d }~X nX d S )Nr z There was an unforseen error: )r< � parse_argsr �argvr6 �print� ExceptionZ print_help)r; Z arguments�outputr) r r r �main� s rB )Z __future__r r r8 r& r r � r r r r r r* r< rB r r r r �<module> s *SPK $]V�oG- - & __pycache__/utils.cpython-36.opt-1.pycnu �[��� 3 �k�ZE � @ s� d dl Z d dlZd dlZddlmZmZmZ yd dlmZm Z W n e k rT Y nX dd� Z dd� Z d d � Z d d � Zd d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� ZdS )� N� )� binary_type�bytes_from_int� text_type)�decode_dss_signature�encode_dss_signaturec C s. t | t�r| jd�S t | t�r"| S td��d S )Nzutf-8zExpected a string value)� isinstancer �decoder � TypeError)�value� r �/usr/lib/python3.6/utils.py� force_unicode s r c C s. t | t�r| jd�S t | t�r"| S td��d S )Nzutf-8zExpected a string value)r r �encoder r )r r r r � force_bytes s r c C sB t | t�r| jd�} t| �d }|dkr8| dd| 7 } tj| �S )N�ascii� r � =)r r r �len�base64Zurlsafe_b64decode)�inputZremr r r �base64url_decode! s r c C s t j| �jdd�S )Nr � )r Zurlsafe_b64encode�replace)r r r r �base64url_encode- s r c C s0 | dk rt d��t| �}t|�dkr(d}t|�S )Nr zMust be a positive integer� )� ValueErrorr r r )�val� int_bytesr r r �to_base64url_uint1 s r c C sJ t | t�r| jd�} t| �}tjdt|� |�}tdjdd� |D ��d�S )Nr z%sB� c S s g | ] }d | �qS )z%02xr )�.0Zbyter r r � <listcomp>D s z'from_base64url_uint.<locals>.<listcomp>� ) r r r r �struct�unpackr �int�join)r �dataZbufr r r �from_base64url_uint= s r) c C sV |s| S y| j � }|j|� W n2 ttfk rP } ztd| ��W Y d d }~X nX |S )Nz-original and updates must be a dictionary: %s)�copy�update�AttributeErrorr r )ZoriginalZupdatesZmerged_options�er r r � merge_dictG s r. c C s$ dd| | f }t j|jd��}|S )Nz%0*x� r )�binasciiZa2b_hexr )Znum� num_bytesZ padded_hexZ big_endianr r r �number_to_bytesT s r2 c C s t tj| �d�S )Nr# )r& r0 Zb2a_hex)�stringr r r �bytes_to_numberZ s r4 c C s2 |j }|d d }t| �\}}t||�t||� S )N� � )�key_sizer r2 )Zder_sig�curve�num_bitsr1 �r�sr r r �der_to_raw_signature^ s r< c C sT |j }|d d }t| �d| kr*td��t| d |� �}t| |d � �}t||�S )Nr5 r6 r/ zInvalid signature)r7 r r r4 r )Zraw_sigr8 r9 r1 r: r; r r r �raw_to_der_signatureg s r= )r r0 r$ �compatr r r Z/cryptography.hazmat.primitives.asymmetric.utilsr r � ImportErrorr r r r r r) r. r2 r4 r< r= r r r r �<module> s$ PK $]܄�J6 6 + __pycache__/exceptions.cpython-36.opt-1.pycnu �[��� 3 �k�Z~ � @ s� G d d� de �ZG dd� de�ZG dd� de�ZG dd� de�ZG dd � d e�ZG d d � d e�ZG d d � d e�ZG dd� de�ZG dd� de �Z G dd� de�Z G dd� de�Z eZ eZ eZdS )c @ s e Zd ZdS )�InvalidTokenErrorN)�__name__� __module__� __qualname__� r r � /usr/lib/python3.6/exceptions.pyr s r c @ s e Zd ZdS )� DecodeErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidSignatureErrorN)r r r r r r r r s r c @ s e Zd ZdS )�ExpiredSignatureErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidAudienceErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidIssuerErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidIssuedAtErrorN)r r r r r r r r s r c @ s e Zd ZdS )�ImmatureSignatureErrorN)r r r r r r r r s r c @ s e Zd ZdS )�InvalidKeyErrorN)r r r r r r r r ! s r c @ s e Zd ZdS )�InvalidAlgorithmErrorN)r r r r r r r r % s r c @ s e Zd Zdd� Zdd� ZdS )�MissingRequiredClaimErrorc C s || _ d S )N)�claim)�selfr r r r �__init__* s z"MissingRequiredClaimError.__init__c C s d| j S )Nz Token is missing the "%s" claim)r )r r r r �__str__- s z!MissingRequiredClaimError.__str__N)r r r r r r r r r r ) s r N)� Exceptionr r r r r r r r r r r ZExpiredSignatureZInvalidAudienceZ InvalidIssuerr r r r �<module> s PK $]M�?k k ( __pycache__/api_jwt.cpython-36.opt-1.pycnu �[��� 3 �k�Z� � @ s� d dl Z d dlZd dlmZ d dlmZmZ d dlmZmZ ddl m Z ddl m Z m Z ddlmZ dd lmZmZmZmZmZmZmZ dd lmZ G d d � d e �Ze� Zej Z ej Z ej Z ej Z ej Z dS ) � N)�timegm)�Iterable�Mapping)�datetime� timedelta� )�PyJWS)� Algorithm�get_default_algorithms)� string_types)� DecodeError�ExpiredSignatureError�ImmatureSignatureError�InvalidAudienceError�InvalidIssuedAtError�InvalidIssuerError�MissingRequiredClaimError)� merge_dictc sv e Zd ZdZedd� �Zd� fdd� Zd � fd d � Zd d d�Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Z� ZS ) �PyJWTZJWTc C s dddddddddd� S )NTF) �verify_signature� verify_exp� verify_nbf� verify_iat� verify_aud� verify_iss� require_exp� require_iat� require_nbf� r r r � /usr/lib/python3.6/api_jwt.py�_get_default_options s zPyJWT._get_default_options�HS256Nc sr t |t�std��x0d D ](}t |j|�t�rt|| j� �||< qW tj|d |d�j d�}t t | �j |||||�S ) NzJExpecting a mapping object, as JWT only supports JSON objects as payloads.�exp�iat�nbf�,�:)Z separators�clszutf-8)r" r# r$ )r% r& ) � isinstancer � TypeError�getr r � utctimetuple�json�dumps�encode�superr )�self�payload�key� algorithmZheadersZ json_encoderZ time_claimZ json_payload)� __class__r r r. # s z PyJWT.encode� Tc s� |r| rt jd t� | j|�\}}} } |d kr:d|i}n |jd|� tt| �j|f|||d�|��} ytj | jd��}W n. t k r� } zt d| ��W Y d d } ~ X nX t |t �s�t d��|r�t| j|�} | j|| f|� |S ) Nz.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.r )r2 � algorithms�optionszutf-8zInvalid payload string: %sz-Invalid payload string: must be a json objectziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). z�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)�warnings�warn�DeprecationWarning�_load� setdefaultr/ r �decoder, �loads� ValueErrorr r( r r r7 �_validate_claims)r0 Zjwtr2 Zverifyr6 r7 �kwargsr1 Z signing_input�headerZ signatureZdecoded�eZmerged_options)r4 r r r= : s* z PyJWT.decoder c K s� d|kr$|j dd�|d< tjdt� t|t�r6|j� }t|ttd �t f�sRt d��| j ||� t t j� j� �}d|kr�|j d�r�| j|||� d|kr�|j d �r�| j|||� d |kr�|j d�r�| j|||� |j d �r�| j||� |j d �r�| j||� d S ) NZverify_expirationTr zXThe verify_expiration parameter is deprecated. Please use verify_exp in options instead.z,audience must be a string, iterable, or Noner# r r$ r r" r r )r* r8 r9 r: r( r Z total_secondsr �typer r) �_validate_required_claimsr r Zutcnowr+ � _validate_iat� _validate_nbf� _validate_exp� _validate_iss� _validate_aud)r0 r1 r7 �audience�issuer�leewayrA �nowr r r r@ ] s( zPyJWT._validate_claimsc C sd |j d�r |j d�d kr td��|j d�r@|j d�d kr@td��|j d�r`|j d�d kr`td��d S )Nr r" r r# r r$ )r* r )r0 r1 r7 r r r rE s z PyJWT._validate_required_claimsc C s2 yt |d � W n tk r, td��Y nX d S )Nr# z)Issued At claim (iat) must be an integer.)�intr? r )r0 r1 rN rM r r r rF � s zPyJWT._validate_iatc C sF yt |d �}W n tk r, td��Y nX ||| krBtd��d S )Nr$ z*Not Before claim (nbf) must be an integer.z The token is not yet valid (nbf))rO r? r r )r0 r1 rN rM r$ r r r rG � s zPyJWT._validate_nbfc C sF yt |d �}W n tk r, td��Y nX ||| k rBtd��d S )Nr" z/Expiration Time claim (exp) must be an integer.zSignature has expired)rO r? r r )r0 r1 rN rM r" r r r rH � s zPyJWT._validate_expc s� |d krd|krd S |d k r,d|kr,t d��|d krDd|krDtd��|d � t� t�r\� g� t� t�sntd��tdd� � D ��r�td��t|t�r�|g}t� fdd�|D ��s�td��d S )N�audzInvalid audiencez Invalid claim format in tokenc s s | ]}t |t� V qd S )N)r( r )�.0�cr r r � <genexpr>� s z&PyJWT._validate_aud.<locals>.<genexpr>c 3 s | ]}|� kV qd S )Nr )rQ rP )�audience_claimsr r rS � s )r r r( r �list�any)r0 r1 rK r )rT r rJ � s" zPyJWT._validate_audc C s4 |d kr d S d|kr t d��|d |kr0td��d S )NZisszInvalid issuer)r r )r0 r1 rL r r r rI � s zPyJWT._validate_iss)r! NN)r5 TNN)NNr )�__name__� __module__� __qualname__Z header_type� staticmethodr r. r= r@ rE rF rG rH rJ rI � __classcell__r r )r4 r r s # ! r )!r, r8 Zcalendarr � collectionsr r r r Zapi_jwsr r6 r r �compatr � exceptionsr r r r r r r Zutilsr r Z_jwt_global_objr. r= Zregister_algorithmZunregister_algorithmZget_unverified_headerr r r r �<module> s" $ 9PK $]�,r�� � " __pycache__/api_jws.cpython-36.pycnu �[��� 3 �k�Z� � @ s� d dl Z d dlZd dlZd dlmZ ddlmZmZmZm Z ddl m Z m Z m Z ddlmZmZmZmZ ddlmZmZmZmZ G dd � d e�Ze� ZejZej Z ej Z ej Z ej Z dS ) � N)�Mapping� )� Algorithm�get_default_algorithms� has_crypto�requires_cryptography)� binary_type� string_types� text_type)� DecodeError�InvalidAlgorithmError�InvalidSignatureError�InvalidTokenError)�base64url_decode�base64url_encode� force_bytes� merge_dictc @ s| e Zd ZdZd dd�Zedd� �Zdd� Zd d � Zd d � Z d dd�Z d dd�Z dd� Z dd� Z d!dd�Zdd� Zd d � ZdS )"�PyJWSZJWTNc C sj t � | _|d k rt|�nt| j�| _x(t| jj� �D ]}|| jkr4| j|= q4W |sVi }t| j� |�| _d S )N) r � _algorithms�set� _valid_algs�list�keysr �_get_default_options�options)�self� algorithmsr �key� r � /usr/lib/python3.6/api_jws.py�__init__ s zPyJWS.__init__c C s ddiS )N�verify_signatureTr r r r r r # s zPyJWS._get_default_optionsc C s> || j krtd��t|t�s$td��|| j |< | jj|� dS )zW Registers a new Algorithm for use when creating and verifying tokens. z Algorithm already has a handler.z!Object is not of type `Algorithm`N)r � ValueError� isinstancer � TypeErrorr �add)r �alg_id�alg_objr r r �register_algorithm) s zPyJWS.register_algorithmc C s* || j krtd��| j |= | jj|� dS )z� Unregisters an Algorithm for use when creating and verifying tokens Throws KeyError if algorithm is not registered. zJThe specified algorithm could not be removed because it is not registered.N)r �KeyErrorr �remove)r r& r r r �unregister_algorithm6 s zPyJWS.unregister_algorithmc C s t | j�S )zM Returns a list of supported values for the 'alg' parameter. )r r )r r r r �get_algorithmsB s zPyJWS.get_algorithms�HS256c C s� g }|d krd}|| j kr| j|d�}|r>| j|� |j|� ttj|d |d��}|jt|�� |jt|�� dj |�} y$| j | } | j |�}| j | |�} W n8 t k r� t r�|tkr�td| ��ntd��Y nX |jt| �� dj |�S ) NZnone)�typ�alg�,�:)Z separators�cls� .zFAlgorithm '%s' could not be found. Do you have cryptography installed?zAlgorithm not supported)r0 r1 )r � header_typ�_validate_headers�updater �json�dumps�appendr �joinr � prepare_keyZsignr) r r �NotImplementedError) r �payloadr � algorithm�headersZ json_encoderZsegments�headerZ json_header� signing_inputr' � signaturer r r �encodeH s8 z PyJWS.encode� Tc K sn t | j|�}|d }|r*| r*tjd t� | j|�\} } } } |sRtjdtdd� n|rj| j| | | | ||� | S ) Nr! z.It is strongly recommended that you pass in a z;value for the "algorithms" argument when calling decode(). z4This argument will be mandatory in a future version.zSThe verify parameter is deprecated. Please use verify_signature in options instead.� )� stacklevelziIt is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). z�It is strongly recommended that you pass in a value for the "algorithms" argument when calling decode(). This argument will be mandatory in a future version.)r r �warnings�warn�DeprecationWarning�_load�_verify_signature) r Zjwsr �verifyr r �kwargsZmerged_optionsr! r= rA r@ rB r r r �decodex s z PyJWS.decodec C s | j |�d }| j|� |S )z�Returns back the JWT header parameters as a dict() Note: The signature is not verified so the header parameters should not be fully trusted until signature verification is complete rE )rJ r5 )r �jwtr? r r r �get_unverified_header� s zPyJWS.get_unverified_headerc 2 C sh t |t�r|jd�}tt|�t�s0tdjt���y$|jdd�\}}|j dd�\}}W n t k rp td��Y nX y t |�}W n" t t jfk r� td��Y nX ytj|jd��}W n. t k r� } ztd| ��W Y d d }~X nX t |t�s�td��y t |�} W n$ t t jfk �r( td ��Y nX y t |�} W n$ t t jfk �rZ td ��Y nX | ||| fS ) Nzutf-8z'Invalid token type. Token must be a {0}r3 r zNot enough segmentszInvalid header paddingzInvalid header string: %sz,Invalid header string: must be a json objectzInvalid payload paddingzInvalid crypto padding)r# r rC � issubclass�typer r �format�rsplit�splitr" r r$ �binascii�Errorr7 �loadsrN r ) r rO rA Zcrypto_segmentZheader_segmentZpayload_segmentZ header_datar@ �er= rB r r r rJ � s: z PyJWS._loadc C sr |j d�}|d k r"||kr"td��y.| j| }|j|�}|j|||�sNtd��W n tk rl td��Y nX d S )Nr/ z&The specified alg value is not allowedz Signature verification failedzAlgorithm not supported)�getr r r; rL r r) ) r r= rA r@ rB r r r/ r' r r r rK � s zPyJWS._verify_signaturec C s d|kr| j |d � d S )N�kid)� _validate_kid)r r? r r r r5 � s zPyJWS._validate_headersc C s t |t�std��d S )Nz(Key ID header parameter must be a string)r# r r )r r[ r r r r\ � s zPyJWS._validate_kid)NN)r- NN)rD TNN)rD N)�__name__� __module__� __qualname__r4 r � staticmethodr r( r+ r, rC rN rP rJ rK r5 r\ r r r r r s / ( r ) rV r7 rG � collectionsr r r r r r �compatr r r � exceptionsr r r r Zutilsr r r r �objectr Z_jws_global_objrC rN r( r+ rP r r r r �<module> s OPK $]{[(�E E utils.pynu �[��� PK $]��� � } api_jws.pynu �[��� PK $]�:Ѵ� � f( compat.pynu �[��� PK $]��4 4 ?. algorithms.pynu �[��� PK $]S�M�� � �b __main__.pynu �[��� PK $]�9) ~ ~ �s exceptions.pynu �[��� PK $] tw contrib/__init__.pynu �[��� PK $]�ۤq q + �w contrib/__pycache__/__init__.cpython-36.pycnu �[��� PK $]�ۤq q 1 �x contrib/__pycache__/__init__.cpython-36.opt-1.pycnu �[��� PK $]���� � Uy contrib/algorithms/py_ecdsa.pynu �[��� PK $] �� contrib/algorithms/__init__.pynu �[��� PK $]p"�c� � ܀ contrib/algorithms/pycrypto.pynu �[��� PK $]wʸ]� � < � contrib/algorithms/__pycache__/pycrypto.cpython-36.opt-1.pycnu �[��� PK $]���� � 6 � contrib/algorithms/__pycache__/py_ecdsa.cpython-36.pycnu �[��� PK $]�ۤq q 6 /� contrib/algorithms/__pycache__/__init__.cpython-36.pycnu �[��� PK $]�ۤq q < � contrib/algorithms/__pycache__/__init__.cpython-36.opt-1.pycnu �[��� PK $]wʸ]� � 6 � contrib/algorithms/__pycache__/pycrypto.cpython-36.pycnu �[��� PK $]���� � < ՜ contrib/algorithms/__pycache__/py_ecdsa.cpython-36.opt-1.pycnu �[��� PK $]�{�� � __init__.pynu �[��� PK $]r��� � W� api_jwt.pynu �[��� PK $]V�oG- - e� __pycache__/utils.cpython-36.pycnu �[��� PK $]�!W� # �� __pycache__/__init__.cpython-36.pycnu �[��� PK $]�!W� ) E� __pycache__/__init__.cpython-36.opt-1.pycnu �[��� PK $]M�?k k " �� __pycache__/api_jwt.cpython-36.pycnu �[��� PK $]8�愌 � ! k� __pycache__/compat.cpython-36.pycnu �[��� PK $]G.�X+ X+ + H� __pycache__/algorithms.cpython-36.opt-1.pycnu �[��� PK $]܄�J6 6 % �" __pycache__/exceptions.cpython-36.pycnu �[��� PK $]K�s� � ) �+ __pycache__/__main__.cpython-36.opt-1.pycnu �[��� PK $]G.�X+ X+ % �9 __pycache__/algorithms.cpython-36.pycnu �[��� PK $]8�愌 � ' te __pycache__/compat.cpython-36.opt-1.pycnu �[��� PK $]�,r�� � ( Wk __pycache__/api_jws.cpython-36.opt-1.pycnu �[��� PK $]K�s� � # �� __pycache__/__main__.cpython-36.pycnu �[��� PK $]V�oG- - & ܒ __pycache__/utils.cpython-36.opt-1.pycnu �[��� PK $]܄�J6 6 + _� __pycache__/exceptions.cpython-36.opt-1.pycnu �[��� PK $]M�?k k ( � __pycache__/api_jwt.cpython-36.opt-1.pycnu �[��� PK $]�,r�� � " �� __pycache__/api_jws.cpython-36.pycnu �[��� PK $ $ � ��
Free Space : 746202267648 Byte