| Current File : //proc/self/root/lib/python3.6/site-packages/josepy/__pycache__/jwk.cpython-36.pyc |
3
�}:ay4 � @ s d Z ddlZddlZddlZddlZddlmZmZmZm Z m
Z
ddl Z ddl
mZ ddlmZ ddlmZ ddlmZ ddlmZ dd lmZmZmZ eje�ZG d
d � d ej ej d �Z e j G d
d� de ��Z e j G dd� de ��Z!e j G dd� de ��Z"dS )z
JSON Web Key.� N)�Dict�Optional�Sequence�Type�Union)�default_backend)�hashes)�
serialization)�ec)�rsa)�errors� json_util�utilc @ s� e Zd ZU dZdZi Zeeef f Z e
e e Z e
e dddd�Z
eeeee e
e ef f
ejfdd �Zejd
d � �Zedd d
��Zeddd��ZdS )�JWKz
JSON Web Key.ZktyN�,�:T)�indentZ
separatorsZ sort_keysc sJ t j|� t� d�}|jtj� fdd�� j� j� D �f� j�j � � |j
� S )zgCompute JWK Thumbprint.
https://tools.ietf.org/html/rfc7638
:returns: bytes
)�backendc s i | ]\}}|� j kr||�qS � )�required)�.0�k�v)�selfr �/usr/lib/python3.6/jwk.py�
<dictcomp>4 s z"JWK.thumbprint.<locals>.<dictcomp>) r ZHashr �update�json�dumpsZto_json�items� _thumbprint_json_dumps_params�encode�finalize)r Z
hash_functionZdigestr )r r �
thumbprint* s
zJWK.thumbprintc C s
t � �dS )ziGenerate JWK with public key.
For symmetric cryptosystems, this would return ``self``.
N)�NotImplementedError)r r r r �
public_key9 s zJWK.public_keyc C s� |d krt � n|}i }xVtjtjfD ]F}y ||||�S tttjjfk
rh } z|||< W Y d d }~X q$X q$W xRtj tj
fD ]B}y
|||�S ttjjfk
r� } z|||< W Y d d }~X q|X q|W t j dj
|���d S )Nz Unable to deserialize key: {0})r r Zload_pem_private_keyZload_der_private_key�
ValueError� TypeError� cryptography�
exceptionsZUnsupportedAlgorithmZload_pem_public_keyZload_der_public_keyr �Error�format)�cls�data�passwordr r) �loader�errorr r r �_load_cryptography_keyB s"
zJWK._load_cryptography_keyc C s� y| j |||�}W n4 tjk
rF } ztjd|� t|d�S d}~X nX | jtk rvt|| j � rvtjdj
|j | j ���x(| j j
� D ]}t||j �r�||d�S q�W tjdj
|j ���dS )a� Load serialized key as JWK.
:param str data: Public or private key serialized as PEM or DER.
:param str password: Optional password.
:param backend: A `.PEMSerializationBackend` and
`.DERSerializationBackend` provider.
:raises errors.Error: if unable to deserialize, or unsupported
JWK algorithm
:returns: JWK of an appropriate type.
:rtype: `JWK`
z,Loading symmetric key, asymmetric failed: %s)�keyNz"Unable to deserialize {0} into {1}zUnsupported algorithm: {0})r1 r r* �logger�debug�JWKOct�typ�NotImplemented�
isinstance�cryptography_key_typesr+ � __class__�TYPES�values)r, r- r. r r2 r0 Zjwk_clsr r r �load\ s zJWK.load)r r )NN)NN)�__name__�
__module__� __qualname__�__doc__�type_field_namer; r �strr r9 r r7 r r r r �int�boolr ZSHA256r# �abc�abstractmethodr% � classmethodr1 r= r r r r r s
& r )� metaclassc @ s> e Zd ZdZdZd ZdejfZdd� Z e
dd� �Z d d
� Z d S )
r5 zSymmetric JWK.�octr2 r c C s dt j| j�iS )Nr )r
�encode_b64joser2 )r r r r �fields_to_partial_json� s z JWKOct.fields_to_partial_jsonc C s | t j|d �d�S )Nr )r2 )r
�decode_b64jose)r, �jobjr r r �fields_from_json� s zJWKOct.fields_from_jsonc C s | S )Nr )r r r r r% � s zJWKOct.public_keyN)r2 )
r> r? r@ rA r6 � __slots__r rB r rL rH rO r% r r r r r5 | s
r5 c st e Zd ZdZdZejejfZdZ de
j dfZ � fdd�Z
edd � �Zed
d � �Zd d
� Zedd� �Zdd� Z� ZS )�JWKRSAz�RSA JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.rsa.RSAPublicKey` wrapped
in :class:`~josepy.util.ComparableRSAKey`
ZRSAr2 �e�nc s> d|kr,t |d tj� r,tj|d �|d< t� j||� d S )Nr2 )r8 r ZComparableRSAKey�super�__init__)r �args�kwargs)r: r r rU � s
zJWKRSA.__init__c C s0 t |j� d�}tj|d �}tj|jd|d��S )zOEncode Base64urlUInt.
:type data: long
:rtype: unicode
� �big)� byteorder�length)�max�
bit_length�mathZceilr
rK �to_bytes)r, r- r[ r r r �
_encode_param� s zJWKRSA._encode_paramc C sF y$t j|�}|stj� �tj|dd�S tk
r@ tj� �Y nX dS )zDecode Base64urlUInt.rY )rZ N)r
rM r �DeserializationErrorrD �
from_bytesr& )r, r- �binaryr r r �
_decode_param� s
zJWKRSA._decode_paramc C s t | �| jj� d�S )N)r2 )�typer2 r% )r r r r r% � s zJWKRSA.public_keyc
sB � �fdd�dD �\}}t j||d�}d�kr>|jt� �}� n�� j�d �}d�ks|d�ks|d �ks|d
�ks|d �ks|d �kr�t�fd
d�dD �� \}}} }
} } tdd� | D ��r�tjdj| ���t� fdd�| D ��\}}} }
} n6t j |||�\}}t j
||�} t j ||�}
t j ||�} t j
|||| |
| |�jt� �}� |d�S )Nc 3 s | ]}� j �| �V qd S )N)rd )r �x)r, rN r r � <genexpr>� s z*JWKRSA.fields_from_json.<locals>.<genexpr>rS rR )rR rS �d�p�q�dp�dq�qiZothc 3 s | ]}� j |�V qd S )N)�get)r rf )rN r r rg � s c s s | ]}|d kr|V qd S )Nr )r Zparamr r r rg � s z(Some private parameters are missing: {0}c 3 s | ]}� j |�V qd S )N)rd )r rf )r, r r rg � s )r2 )rS rR )ri rj rk rl rm )r ZRSAPublicNumbersr% r rd �tupler r* r+ Zrsa_recover_prime_factorsZ rsa_crt_dmp1Z rsa_crt_dmq1Z rsa_crt_iqmpZRSAPrivateNumbers� private_key)
r, rN rS rR �public_numbersr2 rh ri rj rk rl rm Z
all_paramsr )r, rN r rO � s. " zJWKRSA.fields_from_jsonc s~ t � jjtj�r*� jj� }|j|jd�}n>� jj� }� jj � j� }|j|j|j
|j |j |j
|j|jd�}� fdd�|j� D �S )N)rS rR )rS rR rh ri rj rk rl rm c s i | ]\}}� j |�|�qS r )r` )r r2 �value)r r r r � s z1JWKRSA.fields_to_partial_json.<locals>.<dictcomp>)r8 r2 �_wrappedr � RSAPublicKeyrq rS rR �private_numbersr% rh ri rj Zdmp1Zdmq1Ziqmpr )r Znumbers�params�private�publicr )r r rL � s
z JWKRSA.fields_to_partial_json)r2 )r> r? r@ rA r6 r rt Z
RSAPrivateKeyr9 rP r rB r rU rH r` rd r% rO rL �
__classcell__r r )r: r rQ � s
'rQ c s� e Zd ZdZdZdZejejfZ de
j ddfZ � fdd�Z
ed d
� �Zed d � �Zed
d� �Zedd� �Zedd� �Zdd� Zedd� �Zdd� Z� ZS )�JWKECz�EC JWK.
:ivar key: :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePrivateKey`
or :class:`~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey` wrapped
in :class:`~josepy.util.ComparableRSAKey`
ZECr2 �crvrf �yc s> d|kr,t |d tj� r,tj|d �|d< t� j||� d S )Nr2 )r8 r ZComparableECKeyrT rU )r rV rW )r: r r rU
s
zJWKEC.__init__c C s t j|jd|d��S )zlEncode Base64urlUInt.
:type data: long
:type key_size: long
:rtype: unicode
rY )rZ r[ )r
rK r_ )r, r- r[ r r r r` s zJWKEC._encode_paramc C s` y>t j|�}t|�|kr2tjdj||t|�d���tj|dd�S tk
rZ tj� �Y nX dS )zDecode Base64urlUInt.ziExpected parameter "{name}" to be {valid_lengths} bytes after base64-decoding; got {length} bytes instead)�nameZ
valid_lengthsr[ rY )rZ N) r
rM �lenr ra r+ rD rb r& )r, r- r} Z valid_lengthrc r r r rd s
zJWKEC._decode_paramc C s0 |dkr dS |dkrdS |dkr$dS t j� �d S )NZ secp256r1zP-256Z secp384r1zP-384Z secp521r1zP-521)r �SerializationError)r, Z
curve_namer r r �_curve_name_to_crv+ s zJWKEC._curve_name_to_crvc C s< |dkrt j� S |dkr t j� S |dkr0t j� S tj� �d S )NzP-256zP-384zP-521)r
� SECP256R1� SECP384R1� SECP521R1r ra )r, r{ r r r �
_crv_to_curve5 s zJWKEC._crv_to_curvec C s4 t |tj�rdS t |tj�r dS t |tj�r0dS d S )N� �0 �B )r8 r
r� r� r� )r, �curver r r �expected_length_for_curve@ s z JWKEC.expected_length_for_curvec s� i }t �jjtj�r �jj� � n>t �jjtj�rT�jj� }�jj� j� � |j |d< n
t
j d��� j |d< � j
|d< � �fdd�|j� D �}�j� jj�|d< |S )Nrh zRSupplied key is neither of type EllipticCurvePublicKey nor EllipticCurvePrivateKeyrf r| c s& i | ] \}}�j |�j� j��|�qS r )r` r� r� )r r2 rr )rx r r r r V s z0JWKEC.fields_to_partial_json.<locals>.<dictcomp>r{ )r8 r2 rs r
�EllipticCurvePublicKeyrq �EllipticCurvePrivateKeyru r% Z
private_valuer r rf r| r r� r� r} )r rv rw r )rx r r rL I s
z JWKEC.fields_to_partial_jsonc s� � j �d �}� j|��� ��fdd�d D �\}}tj|||d�}d�krX|jt� �}n&� j�d d��}tj||�jt� �}� |d�S )
Nr{ c 3 s | ]}� j �| |��V qd S )N)rd )r rS )r, �expected_lengthrN r r rg _ s z)JWKEC.fields_from_json.<locals>.<genexpr>rf r| )rf r| r� rh )r2 )rf r| ) r� r� r
ZEllipticCurvePublicNumbersr% r rd ZEllipticCurvePrivateNumbersrp )r, rN r� rf r| rq r2 rh r )r, r� rN r rO Z s
zJWKEC.fields_from_jsonc C s8 t | jd�r| jj� }n| jj� jt� �}t| �|d�S )Nr% )r2 )�hasattrr2 r% rq r re )r r2 r r r r% i s zJWKEC.public_key)r2 )r> r? r@ rA r6 rP r
r� r� r9 r rB r rU rH r` rd r� r� r� rL rO r% ry r r )r: r rz � s
rz )#rA rF r Zloggingr^ Ztypingr r r r r Zcryptography.exceptionsr( Z cryptography.hazmat.backendsr Z cryptography.hazmat.primitivesr r Z)cryptography.hazmat.primitives.asymmetricr
r Zjosepyr r
r Z getLoggerr> r3 ZTypedJSONObjectWithFields�ABCMetar �registerr5 rQ rz r r r r �<module> s(
gk