B ÜLJb—$ã@sÖddlZddlZddlZddlmZddlmZddlmZddlmZddl m Z ej e e fZejeZej ejeefZGdd „d ƒZGd d „d eƒZGd d „d eƒZeeje dœdd„ZGdd„dƒZdS)éNé)Ú_base64_alphabet)Ú base64_decode)Ú base64_encode)Ú want_bytes)Ú BadSignaturec@s6eZdZdZeeedœdd„Zeeeedœdd„ZdS) ÚSigningAlgorithmzgSubclasses must implement :meth:`get_signature` to provide signature generation functionality. )ÚkeyÚvalueÚreturncCs tƒ‚dS)z2Returns the signature for the given key and value.N)ÚNotImplementedError)Úselfr r ©rúg/var/www/downstreamdata.science/rtclock/rtclock-venv/lib/python3.7/site-packages/itsdangerous/signer.pyÚ get_signatureszSigningAlgorithm.get_signature)r r Úsigr cCst || ||¡¡S)zMVerifies the given signature matches the expected signature. )ÚhmacÚcompare_digestr)r r r rrrrÚverify_signaturesz!SigningAlgorithm.verify_signatureN)Ú__name__Ú __module__Ú __qualname__Ú__doc__ÚbytesrÚboolrrrrrrsrc@s"eZdZdZeeedœdd„ZdS)Ú NoneAlgorithmz`Provides an algorithm that does not perform any signing and returns an empty signature. )r r r cCsdS)Nór)r r r rrrr%szNoneAlgorithm.get_signatureN)rrrrrrrrrrr src@sJeZdZUdZeejƒZej e d<d ej dœdd„Z e e e dœdd „Z dS) Ú HMACAlgorithmz*Provides signature generation using HMACs.Údefault_digest_methodN)Ú digest_methodcCs|dkr|j}||_dS)N)rr)r rrrrÚ__init__1szHMACAlgorithm.__init__)r r r cCstj|||jd}| ¡S)N)ÚmsgÚ digestmod)rÚnewrÚdigest)r r r Úmacrrrr7szHMACAlgorithm.get_signature)N)rrrrÚ staticmethodÚhashlibÚsha1rÚ_tÚAnyÚ__annotations__r rrrrrrr)s r)Ú secret_keyr cCs&t|ttfƒrt|ƒgSdd„|DƒS)NcSsg|] }t|ƒ‘qSr)r)Ú.0Úsrrrú @sz#_make_keys_list..)Ú isinstanceÚstrrr)r,rrrÚ_make_keys_list<s r2c@sÖeZdZUdZeejƒZej e d<dZ e e d<de eeeje ejej ejedœd d „Zeed œd d „ƒZdeedœdd„Zeedœdd„Zeedœdd„Zeeedœdd„Zeedœdd„Zeedœdd„ZdS) ÚSigneraÖA signer securely signs bytes, then unsigns them to verify that the value hasn't been changed. The secret key should be a random string of ``bytes`` and should not be saved to code or version control. Different salts should be used to distinguish signing in different contexts. See :doc:`/concepts` for information about the security of the secret key and salt. :param secret_key: The secret key to sign and verify with. Can be a list of keys, oldest to newest, to support key rotation. :param salt: Extra key to combine with ``secret_key`` to distinguish signatures in different contexts. :param sep: Separator between the signature and value. :param key_derivation: How to derive the signing key from the secret key and salt. Possible values are ``concat``, ``django-concat``, or ``hmac``. Defaults to :attr:`default_key_derivation`, which defaults to ``django-concat``. :param digest_method: Hash function to use when generating the HMAC signature. Defaults to :attr:`default_digest_method`, which defaults to :func:`hashlib.sha1`. Note that the security of the hash alone doesn't apply when used intermediately in HMAC. :param algorithm: A :class:`SigningAlgorithm` instance to use instead of building a default :class:`HMACAlgorithm` with the ``digest_method``. .. versionchanged:: 2.0 Added support for key rotation by passing a list to ``secret_key``. .. versionchanged:: 0.18 ``algorithm`` was added as an argument to the class constructor. .. versionchanged:: 0.14 ``key_derivation`` and ``digest_method`` were added as arguments to the class constructor. rz django-concatÚdefault_key_derivationóitsdangerous.Signeró.N)r,ÚsaltÚsepÚkey_derivationrÚ algorithmcCs†t|ƒ|_t|ƒ|_|jtkr&tdƒ‚|dk r8t|ƒ}nd}||_|dkrP|j}||_|dkrd|j }||_ |dkr|t |j ƒ}||_ dS)NzŠThe given separator cannot be used because it may be contained in the signature itself. ASCII letters, digits, and '-_=' must not be used.sitsdangerous.Signer) r2Ú secret_keysrr8rÚ ValueErrorr7r4r9rrrr:)r r,r7r8r9rr:rrrr xs$     zSigner.__init__)r cCs |jdS)zThe newest (last) entry in the :attr:`secret_keys` list. This is for compatibility from before key rotation support was added. éÿÿÿÿ)r;)r rrrr,¦szSigner.secret_key)r,r cCs´|dkr|jd}nt|ƒ}|jdkrBt t| |j|¡ ¡¡S|jdkrlt t| |jd|¡ ¡¡S|jdkršt j ||jd}|  |j¡| ¡S|jdkr¨|St d ƒ‚dS) aüThis method is called to derive the key. The default key derivation choices can be overridden here. Key derivation is not intended to be used as a security method to make a complex key out of a short password. Instead you should use large random secret keys. :param secret_key: A specific secret key to derive from. Defaults to the last item in :attr:`secret_keys`. .. versionchanged:: 2.0 Added the ``secret_key`` parameter. Nr=Úconcatz django-concatssignerr)r"ÚnonezUnknown key derivation method) r;rr9r)Úcastrrr7r$rr#ÚupdateÚ TypeError)r r,r%rrrÚ derive_key­s       zSigner.derive_key)r r cCs&t|ƒ}| ¡}|j ||¡}t|ƒS)z*Returns the signature for the given value.)rrCr:rr)r r r rrrrrÎszSigner.get_signaturecCst|ƒ}||j| |¡S)zSigns the given string.)rr8r)r r rrrÚsignÕsz Signer.sign)r rr cCs`y t|ƒ}Wntk r dSXt|ƒ}x0t|jƒD]"}| |¡}|j |||¡r6dSq6WdS)z+Verifies the signature for the given value.FT)rÚ ExceptionrÚreversedr;rCr:r)r r rr,r rrrrÚs  zSigner.verify_signature)Ú signed_valuer cCs^t|ƒ}|j|kr$td|j›dƒ‚| |jd¡\}}| ||¡rF|Std|›d|d‚dS)zUnsigns the given string.zNo z found in valuerz Signature z does not match)ÚpayloadN)rr8rÚrsplitr)r rGr rrrrÚunsignës  z Signer.unsigncCs(y| |¡dStk r"dSXdS)znOnly validates the given signed value. Returns ``True`` if the signature exists and is valid. TFN)rJr)r rGrrrÚvalidateùs  zSigner.validate)r5r6NNN)N)rrrrr&r'r(rr)r*r+r4r1Ú _t_secret_keyÚ_t_opt_str_bytesÚ _t_str_bytesÚOptionalrr Úpropertyrr,rCrrDrrrJrKrrrrr3Cs $ .'!r3)r'rÚtypingr)ÚencodingrrrrÚexcrÚUnionr1rrNrOrMÚIterablerLrrrÚListr2r3rrrrÚs