a
Bg6 @ s d Z ddlZddlZddlZddlZddlmZmZmZm Z m
Z
m Z m Z m
Z
mZ ddlZddlmZ ddlmZmZ ddlmZmZ ddlZddlmZm Z m Z e e Z G dd d e j!ej"d
Z#e#j$G d d d e#Z%e#j$G d
d de#Z&e#j$G dd de#Z'dS )
JSON Web Key. N) AnyCallableDictMappingOptionalSequenceTupleTypeUnion)default_backend)hashes
serialization)ecrsa)errors json_utilutilc @ s e Zd ZU dZdZi Zeeed f e d< dZ
e ee df e d< e
Zee e d< dd d
d Zeeeee ee ef f e d < e e d
< ejfeg ejf edddZej d dddZ e deee ee e dddZ e deee ee d dddZ dS )JWKr ZktyTYPES .cryptography_key_typesrequiredN),:T)indentZ
separatorsZ sort_keys _thumbprint_json_dumps_paramskey)
hash_functionreturnc sN t j| t d}|tj fdd D fi j |
S )zgCompute JWK Thumbprint.
https://tools.ietf.org/html/rfc7638
:returns: bytes
)backendc s i | ]\}}| j v r||qS r )r ).0kvselfr ./usr/lib/python3.9/site-packages/josepy/jwk.py
@ z"JWK.thumbprint..) r
ZHashr updatejsondumpsZto_jsonitemsr encodefinalize)r% r Zdigestr r$ r&
thumbprint3 s
zJWK.thumbprintr c C s
t dS )ziGenerate JWK with public key.
For symmetric cryptosystems, this would return ``self``.
N)NotImplementedErrorr$ r r r&
public_keyF s zJWK.public_key)datapasswordr r c C s |d u rt n|}i }tjtjfD ]R}z||||W S tttjjfyr } z||t |< W Y d }~q"d }~0 0 q"tj
tj fD ]N}z|||W S ttjjfy } z||t |< W Y d }~qd }~0 0 qt
d|d S )Nz Unable to deserialize key: {0})r r Zload_pem_private_keyZload_der_private_key
ValueError TypeError cryptography
exceptionsZUnsupportedAlgorithmstrZload_pem_public_keyZload_der_public_keyr Errorformat)clsr3 r4 r r8 Zloader_privateerrorZ
loader_publicr r r& _load_cryptography_keyO s $$zJWK._load_cryptography_keyc
C s z| |||}W n< tjyN } z"td| t|dW Y d}~S d}~0 0 | jtur|t|| j s|td
|j | j | j
D ] }t||j r||d S qtd
|j dS )a Load serialized key as JWK.
:param str data: Public or private key serialized as PEM or DER.
:param str password: Optional password.
:param backend: A `.PEMSerializationBackend` and
`.DERSerializationBackend` provider.
:raises errors.Error: if unable to deserialize, or unsupported
JWK algorithm
:returns: JWK of an appropriate type.
:rtype: `JWK`
z,Loading symmetric key, asymmetric failed: %sr Nz"Unable to deserialize {0} into {1}zUnsupported algorithm: {0})r> r r: loggerdebugJWKOcttypNotImplemented
isinstancer r; __class__r values)r< r3 r4 r r r= Zjwk_clsr r r& loadl s zJWK.load)NN)NN)!__name__
__module__ __qualname____doc__type_field_namer r r9 r
__annotations__r r r rD r r r r r intboolr
ZSHA256r Z
HashAlgorithmbytesr/ abcabstractmethodr2 classmethodr> rH r r r r& r s:
( r ) metaclassc @ sl e Zd ZU dZdZdZdejfZe e
d< e e e f dddZ
eee ef d d d
d Zd dd d
ZdS )rB zSymmetric JWK.octr? r" r r0 c C s dt | jiS )Nr" )r encode_b64joser r$ r r r& fields_to_partial_json s z JWKOct.fields_to_partial_jsonjobjr c C s | t |d dS )Nr" r? )r decode_b64joser< rZ r r r& fields_from_json s zJWKOct.fields_from_jsonc C s | S Nr r$ r r r& r2 s zJWKOct.public_keyN)rI rJ rK rL rC __slots__r rM r rQ rN r r9 rX rT r r r] r2 r r r r& rB s
rB c s e Zd ZU dZdZejejfZdZ de
j dfZ e
jjed< eedd fd d
Zeeed d d
Zeeed ddZd dddZeeeef d dddZeeef dddZ Z S )JWKRSAzRSA JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey` wrapped
in :class:`~josepy.util.ComparableRSAKey`
ZRSAr? enr Nargskwargsr c s@ d|v r*t |d tjs*t|d |d< t j|i | d S Nr )rE r ComparableRSAKeysuper__init__r% rd re rF r r& ri s zJWKRSA.__init__)r3 r c C s0 t | d}t|d }t|jd|dS )zOEncode Base64urlUInt.
:type data: long
:rtype: unicode
big byteorderlength)max
bit_lengthmathZceilr rW to_bytesr< r3 rp r r r&
_encode_param s zJWKRSA._encode_paramc C sF z&t |}|st tj|ddW S ty@ t Y n0 dS )Decode Base64urlUInt.rm ro N)r r[ r DeserializationErrorrO
from_bytesr5 )r< r3 binaryr r r&
_decode_param s
zJWKRSA._decode_paramr0 c C s t | | j dS )Nr? )typer r2 r$ r r r& r2 s zJWKRSA.public_keyrY c
sD fdddD \}}t j||d}dvr@ |t dS d }dv s~dv s~d v s~d
v s~d v s~d v rtfd
ddD \}}}} }
} tdd | D rtd| t fdd| D \}}}} }
n6t |||\}}t
||}t ||} t ||}
t
||||| |
|t } | dS )Nc 3 s | ]} | V qd S r^ r| r! xr\ r r& r( z*JWKRSA.fields_from_json..rb ra )ra rb dr? pqdpdqqiZothc 3 s | ]} |V qd S r^ )getr )rZ r r& r r( )r r r r r c s s | ]}|d u r|V qd S r^ r )r! Zparamr r r& r r( z(Some private parameters are missing: {0}c 3 s | ]} t|V qd S r^ )r| r9 r )r< r r& r r( )r ZRSAPublicNumbersr2 r r| tupler r: r; Zrsa_recover_prime_factorsZ rsa_crt_dmp1Z rsa_crt_dmq1Z rsa_crt_iqmpZRSAPrivateNumbers private_key)
r< rZ rb ra public_numbersr r r r r r
all_paramsr r r\ r& r] sH " zJWKRSA.fields_from_jsonc s~ t jjtjr* j }|j|jd}n> j } j }|j|j|j
|j |j |j
|j|jd} fdd| D S )Nr )rb ra r r r r r r c s i | ]\}}| |qS r )rv r! r valuer$ r r& r' r( z1JWKRSA.fields_to_partial_json..)rE r _wrappedr RSAPublicKeyr rb ra private_numbersr2 r r r Zdmp1Zdmq1Ziqmpr, )r% Znumbersparamsprivatepublicr r$ r& rX s"
z JWKRSA.fields_to_partial_json) rI rJ rK rL rC r r Z
RSAPrivateKeyr r_ r rM r josepyr rg rN r ri rT rO r9 rv r| r2 r r] r rX
__classcell__r r rk r& r` s
0r` c s e Zd ZU dZdZdZejejfZ de
j ddfZ e
jjed< eedd fd
d Zeeeed d
dZeeeeedddZeeedddZeeejdddZeejedddZe eef dd d Z ee eef d d d d Z d dd!d"Z Z!S )#JWKECzEC JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey` wrapped
in :class:`~josepy.util.ComparableECKey`
ZECr? crvr yr Nrc c s@ d|v r*t |d tjs*t|d |d< t j|i | d S rf )rE r ComparableECKeyrh ri rj rk r r& ri + s zJWKEC.__init__)r3 rp r c C s t |jd|dS )zlEncode Base64urlUInt.
:type data: long
:type key_size: long
:rtype: unicode
rm rn )r rW rt ru r r r& rv 0 s zJWKEC._encode_param)r3 name valid_lengthr c C sh zHt |}t||kr:td| d| dt| dtj|ddW S tyb t Y n0 dS )rw zExpected parameter "z" to be z" bytes after base64-decoding; got z bytes insteadrm rx N)r r[ lenr ry rO rz r5 )r< r3 r r r{ r r r& r| 9 s
zJWKEC._decode_param)
curve_namer c C s0 |dkr dS |dkrdS |dkr$dS t d S )NZ secp256r1P-256Z secp384r1P-384Z secp521r1P-521)r SerializationError)r< r r r r& _curve_name_to_crvG s zJWKEC._curve_name_to_crv)r r c C s< |dkrt S |dkr t S |dkr0t S t d S )Nr r r )r SECP256R1 SECP384R1 SECP521R1r ry )r< r r r r&
_crv_to_curveQ s zJWKEC._crv_to_curve)curver c C sB t |tjrdS t |tjr dS t |tjr0dS td| d S )N 0 B zUnexpected curve: )rE r r r r r5 )r< r r r r& expected_length_for_curve\ s z JWKEC.expected_length_for_curver0 c s i }t jjtjr j n>t jjtjrTj }j |j |d< n
t
d j |d< j
|d< fdd| D } jj|d< |S )Nr zRSupplied key is neither of type EllipticCurvePublicKey nor EllipticCurvePrivateKeyr r c s& i | ] \}}| | jqS r )rv r r r r r% r r& r' u s z0JWKEC.fields_to_partial_json..r )rE r r r EllipticCurvePublicKeyr EllipticCurvePrivateKeyr r2 Z
private_valuer r r r r, r r r )r% r r r r r& rX f s"
z JWKEC.fields_to_partial_jsonrY c s d } | fdddD \}}tj|||d}dvr\ |t dS d d}t||t } |dS )Nr c 3 s | ]} | |V qd S r^ r~ )r! rb r< Zexpected_lengthrZ r r& r r( z)JWKEC.fields_from_json..)r r )r r r r r? ) r r r ZEllipticCurvePublicNumbersr2 r r| ZEllipticCurvePrivateNumbersr )r< rZ r r r r r r r r r& r] | s
zJWKEC.fields_from_jsonc C s8 t | jdr| j }n| j t }t| |dS )Nr2 r? )hasattrr r2 r r r} )r% r r r r& r2 s zJWKEC.public_key)"rI rJ rK rL rC r_ r r r r r rM r r r r rN r ri rT rO r9 rv r| r Z
EllipticCurver r r rX r r] r2 r r r rk r& r s*
r )(rL rR r* Zloggingrs typingr r r r r r r r
r Zcryptography.exceptionsr7 Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr
r Z)cryptography.hazmat.primitives.asymmetricr r Z josepy.utilr r r r Z getLoggerrI r@ ZTypedJSONObjectWithFieldsABCMetar registerrB r` r r r r r& s& ,
qt