ruạṛ
a ���f�5 � @ sz d dl Z d dlZd dlZddlmZmZ ddlmZ ddlm Z m Z m Z m Z m Z mZmZmZ z�d dlmZ d dlmZmZmZ d dlmZmZmZmZm Z m Z m Z m Z d d l m!Z!m"Z" d d l#m$Z$m%Z% d d l&m'Z' d d l(m)Z) d Z*W n e+y� dZ*Y n0 e,g d��Z-dd� Z.G dd� de/�Z0G dd� de0�Z1G dd� de0�Z2e*�rvG dd� de0�Z3G dd� de0�Z4G d d � d e3�Z5dS ) � N� )�constant_time_compare� string_types��InvalidKeyError)�base64url_decode�base64url_encode�der_to_raw_signature� force_bytes� force_unicode�from_base64url_uint�raw_to_der_signature�to_base64url_uint)�hashes)�load_pem_private_key�load_pem_public_key�load_ssh_public_key)� RSAPrivateKey� RSAPublicKey�RSAPrivateNumbers�RSAPublicNumbers�rsa_recover_prime_factors� rsa_crt_dmp1� rsa_crt_dmq1� rsa_crt_iqmp)�EllipticCurvePrivateKey�EllipticCurvePublicKey)�ec�padding)�default_backend)�InvalidSignatureTF� ZRS256ZRS384ZRS512ZES256ZES384ZES521ZES512ZPS256ZPS384ZPS512c C s� t � ttj�ttj�ttj�d�} tr�| �ttj�ttj�ttj�ttj�ttj�ttj�ttj�t t j�t t j�t t j�d� � | S )zE Returns the algorithms that are implemented by the library. )ZnoneZHS256ZHS384ZHS512r! ) � NoneAlgorithm� HMACAlgorithm�SHA256�SHA384�SHA512� has_crypto�update� RSAAlgorithm� ECAlgorithm�RSAPSSAlgorithm)Zdefault_algorithms� r, �>/usr/lib/python3.9/site-packages/oci/_vendor/jwt/algorithms.py�get_default_algorithms+ s& �� r. c @ s@ e Zd ZdZdd� Zdd� Zdd� Zedd � �Zed d � �Z d S ) � AlgorithmzH The interface for an algorithm used to sign and verify tokens. c C s t �dS )z� Performs necessary validation and conversions on the key and returns the key value in the proper format for sign() and verify(). N��NotImplementedError��self�keyr, r, r- � prepare_keyK s zAlgorithm.prepare_keyc C s t �dS )zn Returns a digital signature for the specified message using the specified key value. Nr0 �r3 �msgr4 r, r, r- �signR s zAlgorithm.signc C s t �dS )zz Verifies that the specified digital signature is valid for the specified message and key values. Nr0 �r3 r7 r4 �sigr, r, r- �verifyY s zAlgorithm.verifyc C s t �dS )z7 Serializes a given RSA key into a JWK Nr0 ��key_objr, r, r- �to_jwk` s zAlgorithm.to_jwkc C s t �dS )zb Deserializes a given RSA key from JWK back into a PublicKey or PrivateKey object Nr0 )�jwkr, r, r- �from_jwkg s zAlgorithm.from_jwkN) �__name__� __module__� __qualname__�__doc__r5 r8 r; � staticmethodr> r@ r, r, r, r- r/ G s r/ c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) r" zZ Placeholder for use when no signing or verification operations are required. c C s |dkr d }|d ur t d��|S )N� z*When alg = "none", key value must be None.r r2 r, r, r- r5 t s zNoneAlgorithm.prepare_keyc C s dS )N� r, r6 r, r, r- r8 } s zNoneAlgorithm.signc C s dS )NFr, r9 r, r, r- r; � s zNoneAlgorithm.verifyN)rA rB rC rD r5 r8 r; r, r, r, r- r" o s r" c @ sZ e Zd ZdZejZejZej Z dd� Z dd� Z e dd� �Ze dd � �Zd d � Zd d � ZdS )r# zf Performs signing and verification operations using HMAC and the specified hash function. c C s || _ d S �N��hash_alg�r3 rJ r, r, r- �__init__� s zHMACAlgorithm.__init__c s2 t � �� g d�}t� fdd�|D ��r.td��� S )N)s -----BEGIN PUBLIC KEY-----s -----BEGIN CERTIFICATE-----s -----BEGIN RSA PUBLIC KEY-----� ssh-rsac s g | ] }|� v �qS r, r, )�.0Z string_value�r4 r, r- � <listcomp>� rG z-HMACAlgorithm.prepare_key.<locals>.<listcomp>zdThe specified key is an asymmetric key or x509 certificate and should not be used as an HMAC secret.)r �anyr )r3 r4 Zinvalid_stringsr, rO r- r5 � s �zHMACAlgorithm.prepare_keyc C s t �ttt| ���dd��S )N�oct)�k�kty)�json�dumpsr r r r< r, r, r- r> � s �zHMACAlgorithm.to_jwkc C s, t �| �}|�d�dkr td��t|d �S )NrT rR zNot an HMAC keyrS )rU �loads�getr r )r? �objr, r, r- r@ � s zHMACAlgorithm.from_jwkc C s t �||| j��� S rH )�hmac�newrJ Zdigestr6 r, r, r- r8 � s zHMACAlgorithm.signc C s t || �||��S rH )r r8 r9 r, r, r- r; � s zHMACAlgorithm.verifyN)rA rB rC rD �hashlibZsha256r$ Zsha384r% Zsha512r& rL r5 rE r> r@ r8 r; r, r, r, r- r# � s r# c @ sZ e Zd ZdZejZejZejZdd� Zdd� Z e dd� �Z e dd � �Z d d � Z d d � ZdS )r) z~ Performs signing and verification operations using RSASSA-PKCS-v1_5 and the specified hash function. c C s || _ d S rH rI rK r, r, r- rL � s zRSAAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r|t|�}z.|�d�rFt|t� d�}nt|d t� d�}W q� t yx t |t� d�}Y q�0 nt d��|S )NrM ��backend��passwordr^ � Expecting a PEM-formatted key.) � isinstancer r r r � startswithr r r � ValueErrorr � TypeErrorr2 r, r, r- r5 � s � zRSAAlgorithm.prepare_keyc C s� d }t | dd �r�| �� }ddgtt|jj��tt|jj��tt|j��tt|j��tt|j ��tt|j ��tt|j ��tt|j ��d� }nBt | dd �r�| �� }ddgtt|j��tt|j��d�}nt d��t�|�S )N�private_numbers�RSAr8 ) rT �key_ops�n�e�d�p�q�dp�dq�qir; )rT rh ri rj �Not a public or private key)�getattrrf r r �public_numbersri rj rk rl rm �dmp1�dmq1�iqmpr rU rV )r= rY �numbersr, r, r- r> � s. � �zRSAAlgorithm.to_jwkc s� zt �| �� W n ty( td��Y n0 � �d�dkr@td��d� v �r`d� v �r`d� v �r`d� v rntd ��g d �}� fd d �|D �}t|�}|r�t|�s�td ��tt� d �t� d ��}|�r t t� d �t� d �t� d �t� d �t� d �t� d �|d�}nHt� d �}t |j ||j �\}}t |||t ||�t||�t||�|d�}|�t� �S d� v �r�d� v �r�tt� d �t� d ��}|�t� �S td��d S )NzKey is not valid JSONrT rg zNot an RSA keyrk rj ri Zothz5Unsupported RSA private key: > 2 primes not supported)rl rm rn ro rp c s g | ] }|� v �qS r, r, )rN Zprop�rY r, r- rP rG z)RSAAlgorithm.from_jwk.<locals>.<listcomp>z@RSA key must include all parameters if any are present besides drl rm rn ro rp )rk rl rm rt ru rv rs rq )rU rW rd r rX rQ �allr r r r ri rj r r r Z private_keyr Z public_key) r? Z other_propsZ props_foundZany_props_foundrs rw rk rl rm r, rx r- r@ � s^ � � �� � zRSAAlgorithm.from_jwkc C s |� |t�� | �� �S rH )r8 r �PKCS1v15rJ r6 r, r, r- r8 = s zRSAAlgorithm.signc C s8 z |� ||t�� | �� � W dS ty2 Y dS 0 d S )NTF)r; r rz rJ r r9 r, r, r- r; @ s zRSAAlgorithm.verifyN)rA rB rC rD r r$ r% r& rL r5 rE r> r@ r8 r; r, r, r, r- r) � s # >r) c @ sB e Zd ZdZejZejZejZdd� Zdd� Z dd� Z dd � Z d S ) r* zr Performs signing and verification operations using ECDSA and the specified hash function c C s || _ d S rH rI rK r, r, r- rL P s zECAlgorithm.__init__c C s� t |t�st |t�r|S t |t�r|t|�}z,|�d�rFt|t� d�}nt|t� d�}W q� t yx t |d t� d�}Y q�0 nt d��|S )Ns ecdsa-sha2-r] r_ ra ) rb r r r r rc r r r rd r re r2 r, r, r- r5 S s � zECAlgorithm.prepare_keyc C s" |� |t�| �� ��}t||j�S rH )r8 r �ECDSArJ r �curve)r3 r7 r4 �der_sigr, r, r- r8 k s zECAlgorithm.signc C s^ zt ||j�}W n ty$ Y dS 0 z |�||t�| �� �� W dS tyX Y dS 0 d S )NFT)r r| rd r; r r{ rJ r )r3 r7 r4 r: r} r, r, r- r; p s zECAlgorithm.verifyN) rA rB rC rD r r$ r% r& rL r5 r8 r; r, r, r, r- r* G s r* c @ s e Zd ZdZdd� Zdd� ZdS )r+ zA Performs a signature using RSASSA-PSS with MGF1 c C s* |� |tjt�| �� �| jjd�| �� �S )N�ZmgfZ salt_length)r8 r �PSS�MGF1rJ � digest_sizer6 r, r, r- r8 � s ��zRSAPSSAlgorithm.signc C sL z2|� ||tjt�| �� �| jjd�| �� � W dS tyF Y dS 0 d S )Nr~ TF)r; r r r� rJ r� r r9 r, r, r- r; � s �� zRSAPSSAlgorithm.verifyN)rA rB rC rD r8 r; r, r, r, r- r+ | s r+ )6r\ rZ rU �compatr r � exceptionsr Zutilsr r r r r r r r Z cryptography.hazmat.primitivesr Z,cryptography.hazmat.primitives.serializationr r r Z-cryptography.hazmat.primitives.asymmetric.rsar r r r r r r r Z,cryptography.hazmat.primitives.asymmetric.ecr r Z)cryptography.hazmat.primitives.asymmetricr r Z cryptography.hazmat.backendsr Zcryptography.exceptionsr r' � ImportError�setZrequires_cryptographyr. �objectr/ r" r# r) r* r+ r, r, r, r- �<module> s4 ( ( (4 5
cải xoăn