kKjo PdZddlmZddlZddlZddlmZd dZd dZd dZ d dZ y) zAuthentication utility helpers.) annotationsN)Anyc|jd}t|dk7r td||}|dt| dzzz }tjt j |S)a7Decode a JWT part (header or payload) without signature verification. Args: token: JWT token string (header.payload.signature) part_index: 0 for header, 1 for payload Returns: Decoded part as a dictionary Raises: ValueError: If token is not a valid JWT format .z%Invalid JWT format (expected 3 parts)=)splitlen ValueErrorjsonloadsbase64urlsafe_b64decode)token part_indexpartspart_b64s g/Users/ahmed/devFolder/Ultron/claude-voice/.venv/lib/python3.12/site-packages/fastmcp/utilities/auth.py_decode_jwt_partr sg KK E 5zQ@AAZ H H ~)**H ::f..x8 99ct|dS)a2Decode JWT header without signature verification. Useful for extracting the key ID (kid) for JWKS lookup. Args: token: JWT token string (header.payload.signature) Returns: Decoded header as a dictionary Raises: ValueError: If token is not a valid JWT format rrrs rdecode_jwt_headerr  E1 %%rct|dS)aTDecode JWT payload without signature verification. Use only for tokens received directly from trusted sources (e.g., IdP token endpoints). Args: token: JWT token string (header.payload.signature) Returns: Decoded payload as a dictionary Raises: ValueError: If token is not a valid JWT format rrs rdecode_jwt_payloadr1rrc||dk(r|dSgSt|trA|Dcgc]5}t|jst|j7c}St|tr|j}|sgS|j drh t j |}t|trA|Dcgc]5}t|jst|j7c}S |jddjDcgc]#}|js|j%c}S|Scc}wcc}w#t$rYdwxYwcc}w)zParse scopes from environment variables or settings values. Accepts either a JSON array string, a comma- or space-separated string, a list of strings, or ``None``. Returns a list of scopes or ``None`` if no value is provided. N[, ) isinstanceliststrstrip startswithr r Exceptionreplacer )valuevdatass r parse_scopesr0Bs. } }t,",%(-@1QA @@% I   C  zz%(dD)48KDqCFLLNCFLLNDKK* $)==c#:#@#@#BP#Baaggi #BPP LAL  QsAE E )E>EE8EE$4E$E E! E!)rr'rintreturndict[str, Any])rr'r2r3)r,rr2zlist[str] | None) __doc__ __future__rrr typingrrrrr0rrr8s(%" :,&"&"r