kKj2ddlZddlZddlZddlZddlmZddlmZmZmZddl m Z ddl m Z m Z mZeeefZddedeedzd efd ZGd d ed ZGddZGddeZded efdZd efdZy)N) JSONEncoder) TypedDictAnyCallable)to_bytes)MissingClaimErrorInvalidClaimErrorExpiredTokenErrorclaims encoder_clsreturncdD]T}|j|}t|tjs/tj|j ||<Vt j|dd|}t|S)zTurn claims into bytes payload.)expiatnbfF),:) ensure_ascii separatorscls) get isinstancedatetimecalendartimegm utctimetuplejsondumpsr)r r kclaimcontents h/Users/ahmed/devFolder/Ultron/claude-voice/.venv/lib/python3.12/site-packages/joserfc/_rfc7519/claims.pyconvert_claimsr$sf " 1  eX.. / (:(:(<=F1I# jje P[\G G c~eZdZUeed<edzed<eezezed<eeezezeezeezeezed<y) ClaimsOption essentialN allow_blankvaluevalues)__name__ __module__ __qualname__bool__annotations__strintlistr%r#r'r'sOO 9t  sT! "T#Y .c :T$Z GGr%r'F)totalcfeZdZdZdefdZedeefdZ dede ddfd Z d e ee fddfd Z y) BaseClaimsRegistryz6Requesting "claims" for JWT with the given conditions.kwargsc ||_yN)options)selfr8s r#__init__zBaseClaimsRegistry.__init__'s  r%rc~|jDchc]#}|j|jds"|%c}Scc}w)z"Returns the essential claim names.r()r;r)r<keys r#essential_keysz!BaseClaimsRegistry.essential_keys*s6 $||R|t||C/@/D/D[/Q|RRRs#:: claim_namer*Ncd|jj|}|sy|jd}|sddgifvr t||jd}||jd}||g}|syttr t fd|Ds t|y|vr t|y)a, Validates a given claim value based on predefined options. :param claim_name: The name of the claim to validate. :param value: The value of the claim to be validated. :raises InvalidClaimError: If the value does not meet the claim's validation requirements. Nr)r+r*c3&K|]}|v ywr:r4).0vr*s r# z1BaseClaimsRegistry.check_value..Js9=aqEz=s)r;rr rr3any)r<rAr*optionr) option_values option_values ` r# check_valuezBaseClaimsRegistry.check_value/s!!*- jj/ ur2r(::#J/ / 8,  !::g.L'!-   eT "9=99' 33:M)' 33*r%r c>|jDchc]}|j||}}|r#tdjt ||D]C}||}t |d|zd}|r ||#||j vs2|j||Eycc}w)a< Validates the provided claims against specified requirements and checks. :param claims: A dictionary containing claims to validate. :raises InvalidClaimError: Raised if any claim fails validation. :raises MissingClaimError: Raised if one or more essential keys are missing. Nr validate_)r@rr joinsortedgetattrr;rL)r<r r? missed_keysr*funcs r#validatezBaseClaimsRegistry.validatePs'+&9&9U&9sVZZ_=Ts&9 U #CHHVK-@$AB BC3KE4s!2D9DU  $  e,  Vs BB)r,r-r.__doc__r'r=propertysetr1r@rrLdictrTr4r%r#r7r7$si@SCSS4c4#4$4B-tCH~-$-r%r7c eZdZdZd deegefzdzdededdffd ZedefdZ d eddfd Z d eddfd Z d eddfd Z xZ S)JWTClaimsRegistryzA claims registry for validating JWT claims. :param now: timestamp of "now" time :param leeway: leeway time in seconds :param kwargs: claims options Nnowleewayr8rc P|t}||_||_t|di|y)Nr4) _generate_now_nowr\superr=)r<r[r\r8 __class__s r#r=zJWTClaimsRegistry.__init__ms+ ;C   "6"r%cdt|jr|jS|jS)zReturns the current timestamp.)callabler_)r<s r#r[zJWTClaimsRegistry.nowts& DII 99; yyr%r*ct|s tdd||j|jz kr t d|j d|y)a The "exp" (expiration time) claim identifies the expiration time on or after which the JWT MUST NOT be accepted for processing. The processing of the "exp" claim requires that the current date/time MUST be before the expiration date/time listed in the "exp" claim. Implementers MAY provide for some small leeway, usually no more than a few minutes, to account for clock skew. Its value MUST be a number containing a NumericDate value. Use of this claim is OPTIONAL. rz'Claim 'exp' must be a NumericDate valueN)_validate_numeric_timer r[r\r rLr<r*s r# validate_expzJWTClaimsRegistry.validate_exp{sJ&e,#E+TU U DHHt{{* +#E* * &r%ct|s tdd||j|jzkDr tdd|j d|y)aThe "nbf" (not before) claim identifies the time before which the JWT MUST NOT be accepted for processing. The processing of the "nbf" claim requires that the current date/time MUST be after or equal to the not-before date/time listed in the "nbf" claim. Implementers MAY provide for some small leeway, usually no more than a few minutes, to account for clock skew. Its value MUST be a number containing a NumericDate value. Use of this claim is OPTIONAL. rz'Claim 'nbf' must be a NumericDate valuezThe token is not yet validNrer r[r\rLrfs r# validate_nbfzJWTClaimsRegistry.validate_nbfsM&e,#E+TU U DHHt{{* +#E+GH H &r%ct|s tdd||j|jzkDr tdd|j d|y)aThe "iat" (issued at) claim identifies the time at which the JWT was issued. This claim can be used to determine the age of the JWT. Its value MUST be a number containing a NumericDate value. Use of this claim is OPTIONAL. rz'Claim 'iat' must be a NumericDate valuez"The token was issued in the futureNrirfs r# validate_iatzJWTClaimsRegistry.validate_iatsM &e,#E+TU U DHHt{{* +#E+OP P &r%)Nr)r,r-r.rUr2rr'r=rVr[rgrjrl __classcell__)ras@r#rZrZes#C(2s7"33d:#3#^j#os#S '# '$ ' '# '$ ' '# '$ 'r%rZsc.t|ttfSr:)rr2float)rns r#reres a#u &&r%c<ttjSr:)r2timer4r%r#r^r^s tyy{ r%r:)rrrrrrtypingrrrutilrerrorsr r r rXr1Claimstypebytesr$r'r7rZr2r/rer^r4r%r#rys ++ c3h6[0AD0HTYH9EH>->-B>'*>'B'c'd'sr%