x$)3 d dl mZ d dlZd dlZd dlZd dlZd dlmZmZ d dl m
Z
m Z m Z m
Z
mZmZmZ ddlmZ ddlmZmZ ddlmZmZmZmZmZm Z m Z m Z m Z ej d k rd d
l m!Z! nd d
l"m!Z! d d l#m$Z$ d d l%m&Z& d d
l'm(Z( d dl)m*Z* d dl+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5 d dl6m7Z7m8Z8 d dl9m:Z:m;Z; d dlZ>m?Z?m@Z@mAZAmBZBmCZCmDZD d dlEmFZFmGZGmHZHmIZImJZJmKZKmLZL dZMn
# eN$ r dZMY nw xY we
r3e=e?z ZOe2e4z ZPe:e;z e7z e8z ZQeOePz eQz ZRe=e2z e:z e7z ZSe?e4z e;z e8z ZTh dZUd(dZV G d de ZW G d d eW ZX G d d eW ZYeMr: G d d!eW ZZ G d" d#eW Z[ G d$ d%eZ Z\ G d& d'eW Z]dS dS )) ) annotationsN)ABCabstractmethod)
TYPE_CHECKINGAnyClassVarNoReturnUnioncastoverload InvalidKeyError) HashlibHashJWKDict) base64url_decodebase64url_encodeder_to_raw_signature force_bytesfrom_base64url_uint
is_pem_format
is_ssh_keyraw_to_der_signatureto_base64url_uint) )Literal)InvalidSignature)default_backend)hashes)padding)
ECDSA SECP256K1 SECP256R1 SECP384R1 SECP521R1
EllipticCurveEllipticCurvePrivateKeyEllipticCurvePrivateNumbersEllipticCurvePublicKeyEllipticCurvePublicNumbers)Ed448PrivateKeyEd448PublicKey)Ed25519PrivateKeyEd25519PublicKey)
RSAPrivateKeyRSAPrivateNumbers RSAPublicKeyRSAPublicNumbers rsa_crt_dmp1 rsa_crt_dmq1 rsa_crt_iqmprsa_recover_prime_factors)Encoding NoEncryption
PrivateFormat PublicFormatload_pem_private_keyload_pem_public_keyload_ssh_public_keyTF> ES256ES384ES512ES521EdDSAPS256PS384PS512RS256RS384RS512ES256Kreturndict[str, Algorithm]c t t t j t t j t t j d} t
r+| t t j t t j t t j t t j t t j t t j t t j t t j t t j t t j t t j t d | S )zE
Returns the algorithms that are implemented by the library.
)noneHS256HS384HS512) rG rH rI r? rJ r@ rB rA rD rE rF rC )
NoneAlgorithm
HMACAlgorithmSHA256SHA384SHA512
has_cryptoupdate RSAAlgorithm ECAlgorithmRSAPSSAlgorithm OKPAlgorithm)default_algorithmss `/builddir/build/BUILD/cloudlinux-venv-1.0.10/venv/lib/python3.11/site-packages/jwt/algorithms.pyget_default_algorithmsr_ p s
} 344 } 344 } 344
!!%l&9::%l&9::%l&9::$[%788%k&899$[%788$[%788$ & ) )?@@( )?@@( )?@@%
& c & e Zd ZdZd dZed d Zed d
Zed d
Ze e
ed d Z e e
ed!d"d Z e
ed!d#d Z e
ed$d Z dS )% AlgorithmzH
The interface for an algorithm used to sign and verify tokens.
bytestrbytesrK c t | dd }|t t rt |t rzt |t j r`t
j | t }|
| t | S t ||
S )z
Compute a hash digest using the specified algorithm's hash algorithm.
If there is no hash algorithm, raises a NotImplementedError.
hash_algN)backend)getattrNotImplementedErrorrW
isinstancetype
issubclassr
HashAlgorithmHashr rX rd finalizedigest)selfrc rf rp s r^ compute_hash_digestz Algorithm.compute_hash_digest s 4T22 % %
58T** 5 8V%9:: 5
[_5F5FGGGF MM' " " " **++ +'**113344 4r` keyr c dS )z
Performs necessary validation and conversions on the key and returns
the key value in the proper format for sign() and verify().
N rq rs s r^ prepare_keyzAlgorithm.prepare_key r` msgc dS )zn
Returns a digital signature for the specified message
using the specified key value.
Nru rq ry rs s r^ signzAlgorithm.sign rx r` sigboolc dS )zz
Verifies that the specified digital signature is valid
for the specified message and key values.
Nru rq ry rs r} s r^ verifyzAlgorithm.verify rx r` as_dict
Literal[True]r c d S Nru key_objr s r^ to_jwkzAlgorithm.to_jwk r` FLiteral[False]strc d S r ru r s r^ r zAlgorithm.to_jwk r r` Union[JWKDict, str]c dS )z3
Serializes a given key into a JWK
Nru r s r^ r zAlgorithm.to_jwk rx r` jwk
str | JWKDictc dS )zJ
Deserializes a given key from JWK back into a key object
Nru r s r^ from_jwkzAlgorithm.from_jwk rx r` N)rc rd rK rd )rs r rK r )ry rd rs r rK rd )ry rd rs r r} rd rK r~ )r r rK r F)r r rK r )r r~ rK r )r r rK r )
__name__
__module__ __qualname____doc__rr r rw r| r r staticmethodr r ru r` r^ rb rb sX 5 5 5 5, ^ ^ ^ ^ \ X ^ \ X ^ \
^ \ r` rb c \ e Zd ZdZddZdd Zdd Zeddd Zed d Z dS ) rR zZ
Placeholder for use when no signing or verification
operations are required.
rs
str | NonerK Nonec 8 |dk rd }|t d |S )N z*When alg = "none", key value must be None.r rv s r^ rw zNoneAlgorithm.prepare_key s) "99C ?!"NOO O
r` ry rd c dS )Nr` ru r{ s r^ r| zNoneAlgorithm.sign s sr` r} r~ c dS )NFru r s r^ r zNoneAlgorithm.verify s ur` Fr r r r c t r ri r s r^ r zNoneAlgorithm.to_jwk !###r` r r c t r r r s r^ r zNoneAlgorithm.from_jwk r r` N)rs r rK r )ry rd rs r rK rd )ry rd rs r r} rd rK r~ r )r r r r~ rK r )r r rK r )
r r r r rw r| r r r r ru r` r^ rR rR s
$ $ $ $ \$ $ $ $ \$ $ $r` rR c e Zd ZU dZej Zded< ej Z ded< ej
Z ded< d#d
Z d$dZ
eed%d Zeed&d'd Zed&d(d Zed)d Zd*d Zd+d!Zd"S ),rS zf
Performs signing and verification operations using HMAC
and the specified hash function.
zClassVar[HashlibHash]rT rU rV rf r rK r c || _ d S r rf rq rf s r^ __init__zHMACAlgorithm.__init__ s
r` rs str | bytesrd c ~ t | }t | st | rt d |S )NzdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r r r r rq rs key_bytess r^ rw zHMACAlgorithm.prepare_key sM $$ # # z)'<'< !9
r` r r r r c d S r ru r s r^ r zHMACAlgorithm.to_jwk r` Fr r c d S r ru r s r^ r zHMACAlgorithm.to_jwk r r` r~ r c t t | dd}|r|S t j | S )Noct)kkty)r r decodejsondumps)r r r s r^ r zHMACAlgorithm.to_jwk sO "+g"6"677>>@@
#J:c?? "r` r r c L t | t rt j | }n t | t r| }nt
n # t
$ r t
d w xY w| d dk rt
d t |d S )NKey is not valid JSONr r zNot an HMAC keyr ) rj r r loadsdict
ValueErrorr getr )r objs r^ r zHMACAlgorithm.from_jwk) s ;#s##
! #z#C&&
! ; ; ;!"9:: : ; 775>>U " "!"344 4 C))) A A A&ry c \ t j ||| j S r )hmacnewrf rp r{ s r^ r| zHMACAlgorithm.sign: s$ xS$-0077999r` r} c T t j || || S r )r compare_digestr| r s r^ r zHMACAlgorithm.verify= s# "3 #s(;(;<< r< r r= r s r^ rw zRSAAlgorithm.prepare_keyP s #
| <==
cE3<00
B @AAA#C((I
J ''
33 .A).L.LMMM %';IPT'U'U'U
J
J
JL*=i*H*HIIIII
Js 6B5 #B5 5,C$#C$r r r r c d S r ru r s r^ r zRSAAlgorithm.to_jwkc
Cr` Fr r c d S r ru r s r^ r zRSAAlgorithm.to_jwkh r r` r~ r c d }t | d rM| }ddgt |j j t |j j t |j t |j t |j t |j
t |j t |j d
}nt | d re| }ddgt |j t |j d}nt d |r|S t j | S )Nprivate_numbersRSAr| )
r key_opsnedpqdpdqqir )r r r r Not a public or private key)hasattrr r public_numbersr r r r r r dmp1dmq1iqmpr r r )r r r numberss r^ r zRSAAlgorithm.to_jwkm s *.Cw 122
E!1133 ! &x*7+A+CDDKKMM*7+A+CDDKKMM*7955<<>>*7955<<>>*7955<<>>+GL99@@BB+GL99@@BB+GL99@@BB (++
E!0022 ! (z*7955<<>>*7955<<>> &&CDDD
'
z#&r` r r c 8 t | t rt j | n t | t r| nt
n # t
$ r t
d w xY w d dk rt
d d v rd v rd v rd v rt
d g d
} fd |D }t | }|r t | st
d t t d t d }|rt t d t d
t d t d t d t d | }nst d }t |j ||j \ }}t |||t! || t# || t% || | }| S d v rLd v rHt t d t d S t
d )Nr r r zNot an RSA keyr r r othz5Unsupported RSA private key: > 2 primes not supported)r r r r r c g | ]}|v S ru ru ).0propr s r^
z)RSAAlgorithm.from_jwk.. s C C Ctts{ C C Cr` z@RSA key must include all parameters if any are present besides dr r r r r )r r r r r r r r )rj r r r r r r r anyallr3 r r1 r7 r r r4 r5 r6 private_key
public_key)
r other_props props_foundany_props_foundr r r r r r s
@r^ r zRSAAlgorithm.from_jwk s
? c3'' % *S//CC T** % CC$$
?
?
?%&=>>>
? wwu~~&&%&6777czzcSjjSCZZC<<)O ; : : C C C C{ C C C "%k"2"2" 3{+;+; )Z "2'C11'C11" "
# /-c#h77-c#h77-c#h77 0T ; ; 0T ; ; 0T ; ;'5 GG ,CH55A4&(!^-= DAq 0 )!Q / / )!Q / / )!Q / /'5 G **,,,s
''C11'C11 *,,
&&CDDDs A A
A'ry rd r0 c v | |t j | S r )r| r! PKCS1v15rf r{ s r^ r| zRSAAlgorithm.sign s) 88C!1!3!3T]]__EE Er` r2 r} c | ||t j | dS # t $ r Y dS w xY w)NTF)r r! r rf r r s r^ r zRSAAlgorithm.verify sW
3W%5%7%7 IIIt#
uu
s ;?
A
A
Nrf r rK r )rs r rK r )r r r r rK r r )r r r r rK r )r r r r~ rK r )r r rK r ry rd rs r0 rK rd ry rd rs r2 r} rd rK r~ )r r r r r rT r rU rV r rw r r r r r| r ru r` r^ rY rY C s^
8>}DDDD7=}DDDD7=}DDDD % % % % J J J J&
5:& ' & ' & ' & '
& 'P
E E E E E E
E EN F F F F r` rY c e Zd ZU dZej Zded< ej Zded< ej Zded< d&d
Z d'dZ
d(dZ d)dZ e
ed*d Ze
ed+d,d Ze d+d-d! Zed.d$ Zd%S )/rZ zr
Performs signing and verification operations using
ECDSA and the specified hash function
r rT rU rV rf r rK r c || _ d S r r r s r^ r zECAlgorithm.__init__ r r` rs AllowedECKeys | str | bytes
AllowedECKeysc t |t t f r|S t |t t f st d t
| } | d rt | }nt | }n!# t $ r t |d }Y nw xY wt |t t f st d |S )Nr s ecdsa-sha2-r zcExpecting a EllipticCurvePrivateKey/EllipticCurvePublicKey. Wrong key provided for ECDSA algorithms)
rj r( r* rd r r r r r> r= r r< r )rq rs r
crypto_keys r^ rw zECAlgorithm.prepare_key s # 79O PQQ
cE3<00
B @AAA#C((I
L ''77 @!4Y!?!?JJ!4Y!?!?J
L
L
L 1)d K K K
L 46L M
&y s 4B B-,B-ry rd r( c | |t | }t ||j S r )r| r" rf r curve)rq ry rs der_sigs r^ r| zECAlgorithm.sign s7 hhsE$--//$:$:;;G';; ;r` 'AllowedECKeys'r} r~ c < t ||j }n# t $ r Y dS w xY w t |t r| n|}| ||t | dS # t $ r Y dS w xY w)NFT)
r r r rj r( r r r" rf r )rq ry rs r} r r s r^ r zECAlgorithm.verify s
.sCI>>
uu
"#'>?? CNN$$$
!!'3dmmoo0F0FGGGt#
uu
s
&&A!B
BBr r r r c d S r ru r s r^ r zECAlgorithm.to_jwk) r r` Fr r c d S r ru r s r^ r zECAlgorithm.to_jwk. r r` r c p t | t r'| }n9t | t r| }nt d t | j t rd}nnt | j t rd}nQt | j t rd}n4t | j t rd}nt d| j d|t |j
t |j
d}t | t r;t | j
|d < |r|S t# j | S )
Nr P-256P-384P-521 secp256k1Invalid curve: EC)r crvxyr )rj r( r r r* r r r$ r% r& r# r r r r r
private_valuer r )r r r r r s r^ r zECAlgorithm.to_jwk3 s '#:;;
E!(!3!3!5!5!D!D!F!FG%;<<
E!(!7!7!9!9%&CDDD'-33
I GM955
I GM955
I GM955
I!%&G
&G&GHHH &~'788??AA&~'788??AA # #C '#:;;
,++--; &(( C
'
z#&r` r r c t | t rt j | }n t | t r| }nt
n # t
$ r t
d w xY w| d dk rt
d d|vsd|vrt
d t | d }t | d }| d }|dk rIt | t | cxk rd k rn nt }n t
d
|d k rHt | t | cxk rd k rn nt }nt
d
|dk rHt | t | cxk rdk rn nt }not
d |dk rHt | t | cxk rd k rn nt }n!t
d t
d| t t |d t |d | }d|vr| S t | d }t | t | k r t
dt | | t% t |d | S )Nr r r zNot an Elliptic curve keyr r r r z)Coords should be 32 bytes for curve P-256r 0 z)Coords should be 48 bytes for curve P-384r B z)Coords should be 66 bytes for curve P-521r z-Coords should be 32 bytes for curve secp256k1r big) byteorder)r r r r z!D should be {} bytes for curve {})rj r r r r r r r r lenr$ r% r& r# r+ int
from_bytesr r) r )r r r r r curve_objr r s r^ r zECAlgorithm.from_jwkZ s;
? c3'' % *S//CC T** % CC$$
?
?
?%&=>>>
? wwu~~%%%&ABBB#~~C %&ABBB ..A ..AGGENNE q66SVV))))r))))) ) II)*UVVV'!!q66SVV))))r))))) ) II)*UVVV'!!q66SVV))))r))))) ) II)*UVVV+%%q66SVV))))r))))) ) II)G &&?&?&?@@@ 7..e.44..e.44 N #~~%00222 ..A1vvQ %7Q /qE22N kmm
r Nr )rs r rK r )ry rd rs r( rK rd )ry rd rs r r} rd rK r~ )r r r r rK r r )r r r r rK r )r r r r~ rK r )r r rK r )r r r r r rT r rU rV r rw r| r r r r r ru r` r^ rZ rZ sS
8>}DDDD7=}DDDD7=}DDDD % % % % < < < < <
"
49$ ' $ ' $ ' $ '
$ 'L
A A A
A A A r` rZ c " e Zd ZdZd
dZdd Zd S )r[ zA
Performs a signature using RSASSA-PSS with MGF1
ry rd rs r0 rK c | |t j t j | | j | S )Nmgf salt_length)r| r! PSSMGF1rf digest_sizer{ s r^ r| zRSAPSSAlgorithm.sign s_ 88 T]]__55 $
;
r` r2 r} r~ c
| ||t j t j | | j | dS # t $ r Y dS w xY w)Nr$ TF)r r! r' r( rf r) r r s r^ r zRSAPSSAlgorithm.verify s
K #L 9 9$(MMOO$? MMOO t#
uu
s A9A= =
B
B Nr r )r r r r r| r ru r` r^ r[ r[ sF
r` r[ c e Zd ZdZd!dZd"d
Zd#dZd$dZee d%d Z
ee d&d'd Z
e d&d(d Z
e d)d Z d S )*r\ z
Performs signing and verification operations using EdDSA
This class requires ``cryptography>=2.6`` to be installed.
kwargsr rK r c d S r ru )rq r, s r^ r zOKPAlgorithm.__init__ s Dr` rs AllowedOKPKeys | str | bytesAllowedOKPKeysc t |t t f rt |t r| d n|}t |t r| d n|}d|v rt | }n3d|v rt
|d }n |dd dk rt | }t |t t t t f st d |S ) Nutf-8z-----BEGIN PUBLICz-----BEGIN PRIVATEr r zssh-zcExpecting a EllipticCurvePrivateKey/EllipticCurvePublicKey. Wrong key provided for EdDSA algorithms)
rj rd r r encoder= r< r> r. r/ r, r- r )rq rs key_strr s r^ rw zOKPAlgorithm.prepare_key s #s|,,
91;C1G1GP#**W---S3=c33G3G PCJJw / / /S &'11-i88CC)W44.y4HHHCC QqS\V++-i88C "$4o~V
&y Jr` ry r #Ed25519PrivateKey | Ed448PrivateKeyrd c t |t r| d n|}| | S )aS
Sign a message ``msg`` using the EdDSA private key ``key``
:param str|bytes msg: Message to sign
:param Ed25519PrivateKey}Ed448PrivateKey key: A :class:`.Ed25519PrivateKey`
or :class:`.Ed448PrivateKey` isinstance
:return bytes signature: The signature, as bytes
r1 )rj r r3 r| )rq ry rs msg_bytess r^ r| zOKPAlgorithm.sign s; 0:#s/C/CL
7+++I88I&& &r` r} r~ c j t |t r| d n|}t |t r| d n|}t |t t f r| n|}| || dS # t $ r Y dS w xY w)a
Verify a given ``msg`` against a signature ``sig`` using the EdDSA key ``key``
:param str|bytes sig: EdDSA signature to check ``msg`` against
:param str|bytes msg: Message to sign
:param Ed25519PrivateKey|Ed25519PublicKey|Ed448PrivateKey|Ed448PublicKey key:
A private or public EdDSA key instance
:return bool verified: True if signature is valid, False if not.
r1 TF)rj r r3 r. r, r r r )rq ry rs r} r7 sig_bytesr s r^ r zOKPAlgorithm.verify s
3=c33G3G PCJJw / / /S 3=c33G3G PCJJw / / /S "#(9?'KLL CNN$$$
!!)Y777t#
uu
s B B$ $
B21B2r r r c d S r ru rs r s r^ r zOKPAlgorithm.to_jwk r r` Fr r c d S r ru r; s r^ r zOKPAlgorithm.to_jwk r r` r c t | t t f r| t j t j }t | t rdnd}t t | d|d}|r|S t j | S t | t t f r| t j t j t! }| t j t j }t | t rdnd}t t | t t | d|d}|r|S t j | S t% d ) N)encodingformatEd25519Ed448OKP)r r r )r> r? encryption_algorithm)r r r r r )rj r/ r- public_bytesr8 Rawr; r r r r r r. r,
private_bytesr: r9 r r )rs r r r r r s r^ r zOKPAlgorithm.to_jwk s # 0. ABB
+$$ %\'+ % $.c3C#D#DQii' *+a..99@@BB + J :c??*# 1? CDD
+%% %\(,)5 & NN$$11 %\'+ 2
$.c3D#E#ERii7)+a..99@@BB)+a..99@@BB + J :c??*!"?@@ @r` r r c < t | t rt j | }n t | t r| }nt
n # t
$ r t
d w xY w| d dk rt
d | d }|dk r|dk rt
d| d |vrt
d
t | d } d |vr.|dk rt j
| S t j
| S t | d }|dk rt j
| S t j
| S # t
$ r}t
d |d }~ww xY w)
Nr r rB zNot an Octet Key Pairr r@ rA r r z OKP should have "x" parameterr zInvalid key parameter)rj r r r r r r r r r/ from_public_bytesr- r. from_private_bytesr, )r r r r r errs r^ r zOKPAlgorithm.from_jwk= s
? c3'' % *S//CC T** % CC$$
?
?
?%&=>>>
? wwu~~&&%&=>>>GGENNE !!ew&6&6%&?&?&?@@@#~~%&EFFF ..A
Hc>> )) / A! D DD);A>>>$SWWS\\22I%%,?BBB&9!<<<
H
H
H%&=>>CG
Hs6 A A A&: E< E< ,;E< (E< <
FFFN)r, r rK r )rs r. rK r/ )ry r rs r5 rK rd )ry r rs r/ r} r rK r~ )rs r/ r r rK r r )rs r/ r r rK r )rs r/ r r~ rK r )r r rK r/ ) r r r r r rw r| r r r r r ru r` r^ r\ r\ s . ' ' ' ' 4
, A , A , A , A
, A\
H H H
H H Hr` r\ )rK rL )^
__future__r r r r sysabcr r typingr r r r r
r r
exceptionsr typesr r utilsr r r r r r r r r version_infor typing_extensionscryptography.exceptionsr cryptography.hazmat.backendsr cryptography.hazmat.primitivesr )cryptography.hazmat.primitives.asymmetricr! ,cryptography.hazmat.primitives.asymmetric.ecr" r# r$ r% r& r' r( r) r* r+ /cryptography.hazmat.primitives.asymmetric.ed448r, r- 1cryptography.hazmat.primitives.asymmetric.ed25519r. r/ -cryptography.hazmat.primitives.asymmetric.rsar0 r1 r2 r3 r4 r5 r6 r7 ,cryptography.hazmat.primitives.serializationr8 r9 r: r; r< r= r> rW ModuleNotFoundErrorr r r/ AllowedKeysAllowedPrivateKeysAllowedPublicKeysrequires_cryptographyr_ rb rR rS rY rZ r[ r\ ru r` r^ rb s~ " " " " " "
# # # # # # # # P P P P P P P P P P P P P P P P P P ' ' ' ' ' ' ' ' ' ' ' ' ' '
v ))))))/888888<<<<<<555555AAAAAA JJ JJJ
"\1N+.DDM ,,> O !=0>AK//2CCoU --0@@>Q
DH H H H H H H H V$ $ $ $ $I $ $ $