kKj(+ddlmZmZddlmZddlmZmZmZm Z m Z ddl m Z m Z mZddlmZmZmZddlmZmZmZmZmZmZddlmZmZmZdd lmZdd l m!Z!m"Z#dd l$m%Z%m&Z'dd l(m)Z)m*Z*dd l+m,Z,m-Z-m.Z.ddl/m0Z0ddl1m2Z2ddl3m4Z4gdZ5e0 d*de4de6e7zde-dzdee7dzde dzde7f dZ8 d*dede-dzdee7dzde dzde9f dZ: d+de6e7zde-dzdee7dzde dzde6e7zdzdef dZ;e d*dee d*dede-dee7dzde dzde f d$Z> d*deezde-dee7dzde dzde e zf d%Z>ede7de7fd&Z?edede@e7effd'Z?edede@e7effd(Z?dedefd)Z?y),)overloadAny) Collection) JWSAlgModel HeaderMemberCompactSignatureGeneralJSONSignatureFlattenedJSONSignature) JWSRegistryconstruct_registrydefault_registry) sign_compactverify_compactdetach_compact_content)sign_general_jsonsign_flattened_jsonverify_general_jsonverify_flattened_jsonextract_general_jsondetach_json_content) HeaderDictGeneralJSONSerializationFlattenedJSONSerialization)is_rfc7797_enabled)sign_rfc7515_compactextract_rfc7515_compact)sign_rfc7797_jsonextract_rfc7797_json)BadSignatureErrorMissingKeyError)Key KeyFlexible guess_key)setup_jws_algorithms)to_bytes)Header)rrrr rr r r serialize_compactdeserialize_compactextract_compactvalidate_compactserialize_jsondeserialize_jsondetach_contentrN protectedpayload private_key algorithmsregistryreturnc|| t|}|j|t|}t|t |}|j |d}d}|j dk7r,| tt||dd}|j||rt|||} n t|||} | jdS)aGenerate a JWS Compact Serialization. The JWS Compact Serialization represents digitally signed or MACed content as a compact, URL-safe string, per Section 7.1. .. code-block:: text BASE64URL(UTF8(JWS Protected Header)) || '.' || BASE64URL(JWS Payload) || '.' || BASE64URL(JWS Signature) :param protected: protected header part of the JWS, in dict :param payload: payload data of the JWS, in bytes :param private_key: a flexible private key to sign the signature :param algorithms: a collection (list, tuple, or set) of allowed algorithms :param registry: a JWSRegistry to use :return: JWS in str NalgnoneTsigusezutf-8) r check_headerrr r&get_algnamer!r$ check_keyrrdecode) r/r0r1r2r3 is_rfc7797objr6keyouts \/Users/ahmed/devFolder/Ultron/claude-voice/.venv/lib/python3.12/site-packages/joserfc/jws.pyr(r(Js0%j1 )$#I.J 9hw&7 8C'' %(89CC xx6  !# # S$E: c"3S13S) ::g rA public_keyc | t|}|j}|j||j|d}|ddk(r t ||dS| t t ||d}|j|t |||S)azValidate the JWS Compact Serialization with the given key. This method is usually used together with ``extract_compact``. :param obj: object of the JWS Compact Serialization :param public_key: a flexible public key to verify the signature :param algorithms: a collection (list, tuple, or set) of allowed algorithms :param registry: a JWSRegistry to use Nr6r7r8r9)r headersr;r<rr!r$r>)rArFr2r3rHr6rBs rDr+r+{s%j1kkmG '"''7Cu~c3--Se4CMM# #sC ((rEvaluecbtt|||}t||||s t|S)aExtract and validate the JWS Compact Serialization (in string, or bytes) with the given key. An JWE Compact Serialization looks like: .. code-block:: text :caption: line breaks for display purposes only eyJ0eXAiOiJKV1QiLA0KICJhbGciOiJIUzI1NiJ9 . eyJpc3MiOiJqb2UiLA0KICJleHAiOjEzMDA4MTkzODAsDQogImh0dHA6Ly9leGFt cGxlLmNvbS9pc19yb290Ijp0cnVlfQ . dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk :param value: a string (or bytes) of the JWS Compact Serialization :param public_key: a flexible public key to verify the signature :param algorithms: a collection (list, tuple, or set) of allowed algorithms :param registry: a JWSRegistry to use :param payload: optional payload, required with detached content :raises BadSignatureError: when signature verification fails :return: object of the CompactSignature )r*r&r+r )rIrFr2r3r0rAs rDr)r)s28 (5/7H =C CZ B!! JrEmemberscyNrKr0r1r2r3s rDr,r,s #rEcyrMrNrOs rDr,r,s"%rEcN| t|}dtdtffd }t|}t |t r&|Dcgc] }tdi|}}t ||||Stdi|}t|jrt||||St||||Scc}w)a|Generate a JWS JSON Serialization (in dict). The JWS JSON Serialization represents digitally signed or MACed content as a JSON object. This representation is neither optimized for compactness nor URL-safe. A general JWS JSON Serialization contains: payload The "payload" member MUST be present and contain the value BASE64URL(JWS Payload). signatures The "signatures" member value MUST be an array of JSON objects. Each object represents a signature or MAC over the JWS Payload and the JWS Protected Header. A flatten JWS JSON Serialization looks like: .. code-block:: text { "payload":"", "protected":"", "header":, "signature":"" } rAr4c"t|ddS)NTr8r9r$)rAr1s rDfind_keyz serialize_json..find_keysc4U;;rErN) r rr"r& isinstancelistrrrHrr) rKr0r1r2r3rT_payloadmember_memberss ` rDr,r,sB%j1.find_key(sSe44rE signatures)r rr"rrr extract_flattened_jsonr)rIrFr2r3rT general_obj flattened_objs ` rDr-r-s%j15l5s5u*5(; ";(C#% %.uh? $]HhG#% %rEcyrMrNrIs rDr.r.7s'*rEcyrMrNrds rDr.r.;sGJrEcyrMrNrds rDr.r.?sILrEcNt|tr t|St|S)aIn some contexts, it is useful to integrity-protect content that is not itself contained in a JWS. This method is an implementation of https://www.rfc-editor.org/rfc/rfc7515#appendix-F It is used to detach the content of the compact and JSON serialization. .. code-block:: python >>> from joserfc import jws >>> from joserfc.jwk import OctKey >>> key = OctKey.import_key("secret") >>> encoded_text = jws.serialize_compact({"alg": "HS256"}, b"hello", key) >>> jws.detach_content(encoded_text) 'eyJhbGciOiJIUzI1NiJ9..UYmO_lPAY5V0Wf4KZsfhiYs1SxqXPhxvjuYqellDV5A' You can also detach the JSON serialization: .. code-block:: python >>> obj = jws.serialize_json({"protected": {"alg": "HS256"}}, b"hello", key) >>> jws.detach_content(obj) { 'payload': '', 'signature': 'UYmO_lPAY5V0Wf4KZsfhiYs1SxqXPhxvjuYqellDV5A', 'protected': 'eyJhbGciOiJIUzI1NiJ9' } )rUstrrrrds rDr.r.Cs$8%%e,, u %%rE)NN)NNN)Atypingrrcollections.abcr_rfc7515.modelrrr r r _rfc7515.registryr r r_rfc7515.compactrrr _rfc7515.jsonrrrrrr_rfc7515.typesrrr _rfc7797.utilr_rfc7797.compactrrr* _rfc7797.jsonrrr`errorsr r!jwkr"r#r$jwar%utilr&r3r'__all__bytesrhr(boolr+r)rVr,r-r.dictrNrErDr{s= &   .7,,% .*.#' .. S[.t#.3$& . D .  .h*.#' ) )d")3$&)D )  )H*.#'"&  3;d"3$&D  S[4    D *.#' # * # S[##3$& # D #  # # *.#' % % S[%%3$& % D %  % %*.#' /I $z* */I S[/I/I3$& /I D /I  :: /Id *.#'  #3$&D     *.#' ! %!!3$&!D !  ! !*.#'  #&@ @3$&D  22 B *#*#* * J2JtCH~J J L4Lc3hL L&#&#&rE