h:ddlZddlmZddlmZmZmZddlZddlm Z ddlm Z m Z m Z ddlmZddlmZ dd lmZmZd Zn #e$rd ZYnwxYwhd ZGd dZdS)N) timedelta)OptionalTypeUnion) gettext_lazy)InvalidAlgorithmErrorInvalidTokenError algorithms)TokenBackendError) format_lazy) PyJWKClientPyJWKClientErrorTF> ES256ES384ES512HS256HS384HS512RS256RS384RS512c eZdZ ddedeeeefdee e j fdZ dZ defd Zd Zd Zdd ZdS) TokenBackendNjwk_urlleeway json_encoderc ||||_||_||_||_||_t r|rt|nd|_nd|_||_ ||_ dS)N) _validate_algorithm algorithm signing_key verifying_keyaudienceissuerJWK_CLIENT_AVAILABLEr jwks_clientrr) selfr!r"r#r$r%rrrs ]/var/www/html/Sam_Eipo/venv/lib/python3.11/site-packages/rest_framework_simplejwt/backends.py__init__zTokenBackend.__init__!s   +++"&*    $7>H{7333DD  #D  (c|tvr*tttd||tjvr6tjs,tttd|dSdS)z Ensure that the nominated algorithm is recognized, and that cryptography is installed for those algorithms that require it z Unrecognized algorithm type '{}'z/You must have cryptography installed to use {}.N)ALLOWED_ALGORITHMSr r _r requires_cryptography has_crypto)r(r!s r)r z TokenBackend._validate_algorithm<s . . .#A@AA9MM   8 8 8AV 8#GHH)  9 8 8 8r+returncV|jtdSt|jttfrt|jSt|jtr|jSt t tdt|j)Nr)secondszIUnrecognized type '{}', 'leeway' must be of type int, float or timedelta.) rr isinstanceintfloatr r r.type)r(s r) get_leewayzTokenBackend.get_leewayMs ; Q''' '  c5\ 2 2 T[111 1  Y / / ; #c%%  r+c|jdr|jS|jrO |j|jS#t $r"}ttd|d}~wwxYw|j S)NHSToken is invalid or expired) r! startswithr"r'get_signing_key_from_jwtkeyrr r.r#)r(tokenexs r)get_verifying_keyzTokenBackend.get_verifying_key^s > $ $T * * $# #   R R'@@GGKK# R R R'*G(H(HIIrQ R!!sA A5A00A5c|}|j |j|d<|j |j|d<tj||j|j|j}t|tr| dS|S)zL Returns an encoded token for the given payload dictionary. Naudiss)r!rzutf-8) copyr$r%jwtencoder"r!rr4bytesdecode)r(payload jwt_payloadr?s r)rGzTokenBackend.encodejsllnn = $!%K  ; "!%K    n*     eU # # )<<(( ( r+Tc j tj||||jg|j|j||jdu|dS#t$r"}ttd|d}~wt$r"}ttd|d}~wwxYw)z Performs a validation of the given token and returns its payload dictionary. Raises a `TokenBackendError` if the token is malformed, if its signature check fails, or if its 'exp' claim indicates it has expired. N) verify_audverify_signature)r r$r%roptionszInvalid algorithm specifiedr;) rFrIrAr!r$r%r8rr r.r )r(r?verifyr@s r)rIzTokenBackend.decodes N:&&u-- N+{(("&-t";(.    % N N N#A&C$D$DEE2 M  N N N#A&C$D$DEE2 M Ns$AA B2&B B2B--B2)NrNNNNN)T)__name__ __module__ __qualname__strrr6r5rrrjson JSONEncoderr*r r8rArGrIr+r)rr s/39=)))eS)+,)tD$456))))6"I" " " ",NNNNNNr+r)rUdatetimertypingrrrrFdjango.utils.translationrr.rr r exceptionsr utilsr rrr& ImportErrorr-rrWr+r)r^s@ (((((((((( 666666DDDDDDDDDD))))))!11111111!!! !   xNxNxNxNxNxNxNxNxNxNs AA  A