!h:ddlZddlmZddlmZmZmZddlZddlm Z ddlm Z m Z m Z ddlmZddlmZ dd lmZmZd Zhd ZGd dZy#e$rd ZYwxYw)N) timedelta)OptionalTypeUnion) gettext_lazy)InvalidAlgorithmErrorInvalidTokenError algorithms)TokenBackendError) format_lazy) PyJWKClientPyJWKClientErrorTF> ES256ES384ES512HS256HS384HS512RS256RS384RS512c eZdZ d dedeeeefdee e jfdZ dZ defdZd Zd Zd d Zy) TokenBackendNjwk_urlleeway json_encoderc |j|||_||_||_||_||_t r|r t|nd|_nd|_||_ ||_ y)N) _validate_algorithm algorithm signing_key verifying_keyaudienceissuerJWK_CLIENT_AVAILABLEr jwks_clientrr) selfr r!r"r#r$rrrs a/var/www/html/Ryun_Seer/newvenv/lib/python3.12/site-packages/rest_framework_simplejwt/backends.py__init__zTokenBackend.__init__!sb   +"&*   7>{73DD #D  (c|tvrtttd||tj vr/tj stttd|yy)z Ensure that the nominated algorithm is recognized, and that cryptography is installed for those algorithms that require it z Unrecognized algorithm type '{}'z/You must have cryptography installed to use {}.N)ALLOWED_ALGORITHMSr r _r requires_cryptography has_crypto)r'r s r(rz TokenBackend._validate_algorithm<sl . .#A@A9M   88 8AVAV#GH) BW 8r*returncL|j tdSt|jttfrt|jSt|jtr |jSt t tdt|j)Nr)secondszIUnrecognized type '{}', 'leeway' must be of type int, float or timedelta.) rr isinstanceintfloatr r r-type)r's r( get_leewayzTokenBackend.get_leewayMs~ ;; Q' '  c5\ 2T[[1 1  Y /;; #c%  r*c|jjdr |jS|jr& |jj |j S|jS#t $r}ttd|d}~wwxYw)NHSToken is invalid or expired) r startswithr!r&get_signing_key_from_jwtkeyrr r-r")r'tokenexs r(get_verifying_keyzTokenBackend.get_verifying_key^s >> $ $T *## #    R''@@GKKK!!!$ R'*G(HIrQ Rs$A&& B /BB cB|j}|j|j|d<|j|j|d<tj||j |j |j}t|tr|jdS|S)zL Returns an encoded token for the given payload dictionary. audiss)r rzutf-8) copyr#r$jwtencoder!r rr3bytesdecode)r'payload jwt_payloadr>s r(rFzTokenBackend.encodejslln == $!%K  ;; "!%K     nn**   eU #<<( ( r*c ` tj||j||jg|j|j |j |jdu|dS#t$r}ttd|d}~wt$r}ttd|d}~wwxYw)z Performs a validation of the given token and returns its payload dictionary. Raises a `TokenBackendError` if the token is malformed, if its signature check fails, or if its 'exp' claim indicates it has expired. N) verify_audverify_signature)r r#r$roptionszInvalid algorithm specifiedr:) rErHr@r r#r$r7rr r-r )r'r>verifyr?s r(rHzTokenBackend.decodes N::&&u- NN+{{("&--t";(.  % N#A&C$DE2 M  N#A&C$DE2 M Ns$A&A)) B-2B B-B((B-)NNNNNN)T)__name__ __module__ __qualname__strrr5r4rrrjson JSONEncoderr)rr7r@rFrHr*r(rr sy/39=))eS)+,)tD$4$456)6"I" ",Nr*r)rUdatetimertypingrrrrEdjango.utils.translationrr-rr r exceptionsr utilsr rrr% ImportErrorr,rrWr*r(r^s^ (( 6DD)!1 xNxN!! !s AAA