U
|
ß=®d$ ã @ sÖ d dl Z d dlZd dlZddlmZ ddlmZ ddlmZ ddlmZ ddl m
|
Z
|
ej e e f Zeje Zej eje ef ZG dd d ZG d
|
d d eZG d d d eZeeje dddZG dd dZdS )é Né )Ú_base64_alphabet)Ú base64_decode)Ú base64_encode©Ú
|
want_bytes)Ú BadSignaturec @ s6 e Zd ZdZeeedddZeeeedddZdS ) ÚSigningAlgorithmzgSubclasses must implement :meth:`get_signature` to provide
|
signature generation functionality.
|
©ÚkeyÚvalueÚreturnc C s
|
t dS )z2Returns the signature for the given key and value.N)ÚNotImplementedError©Úselfr r © r úJd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\itsdangerous/signer.pyÚ get_signature s z SigningAlgorithm.get_signature)r r Úsigr c C s t || ||¡¡S )zMVerifies the given signature matches the expected
|
signature.
|
)ÚhmacÚcompare_digestr )r r r r r r r Úverify_signature s z!SigningAlgorithm.verify_signatureN)Ú__name__Ú
|
__module__Ú __qualname__Ú__doc__Úbytesr Úboolr r r r r r s r c @ s" e Zd ZdZeeedddZdS )Ú NoneAlgorithmz`Provides an algorithm that does not perform any signing and
|
returns an empty signature.
|
r
|
c C s dS )Nó r r r r r r % s zNoneAlgorithm.get_signatureN)r r r r r r r r r r r s r c @ sJ e Zd ZU dZeejZej e
|
d< d
|
ej dddZ e e e ddd Z dS ) Ú HMACAlgorithmz*Provides signature generation using HMACs.Údefault_digest_methodN)Ú digest_methodc C s |d kr| j }|| _d S )N)r! r" )r r" r r r Ú__init__1 s zHMACAlgorithm.__init__r
|
c C s t j||| jd}| ¡ S )N)ÚmsgÚ digestmod)r Únewr" Údigest)r r r Úmacr r r r 7 s zHMACAlgorithm.get_signature)N)r r r r Ú staticmethodÚhashlibÚsha1r! Ú_tÚAnyÚ__annotations__r# r r r r r r r ) s
|
r ©Ú
|
secret_keyr c C s& t | ttfrt| gS dd | D S )Nc S s g | ] }t |qS r r )Ú.0Úsr r r Ú
|
<listcomp>@ s z#_make_keys_list.<locals>.<listcomp>)Ú
|
isinstanceÚstrr r )r0 r r r Ú_make_keys_list< s
|
r6 c @ sÖ e Zd ZU dZeejZej e
|
d< dZ e e
|
d< d e eeeje ejej eje dd d
|
Zeed d d Zd eedddZeedddZeedddZeeedddZeedddZeedd d Z dS ) ÚSigneraÖ A signer securely signs bytes, then unsigns them to verify that
|
the value hasn't been changed.
|
|
The secret key should be a random string of ``bytes`` and should not
|
be saved to code or version control. Different salts should be used
|
to distinguish signing in different contexts. See :doc:`/concepts`
|
for information about the security of the secret key and salt.
|
|
:param secret_key: The secret key to sign and verify with. Can be a
|
list of keys, oldest to newest, to support key rotation.
|
:param salt: Extra key to combine with ``secret_key`` to distinguish
|
signatures in different contexts.
|
:param sep: Separator between the signature and value.
|
:param key_derivation: How to derive the signing key from the secret
|
key and salt. Possible values are ``concat``, ``django-concat``,
|
or ``hmac``. Defaults to :attr:`default_key_derivation`, which
|
defaults to ``django-concat``.
|
:param digest_method: Hash function to use when generating the HMAC
|
signature. Defaults to :attr:`default_digest_method`, which
|
defaults to :func:`hashlib.sha1`. Note that the security of the
|
hash alone doesn't apply when used intermediately in HMAC.
|
:param algorithm: A :class:`SigningAlgorithm` instance to use
|
instead of building a default :class:`HMACAlgorithm` with the
|
``digest_method``.
|
|
.. versionchanged:: 2.0
|
Added support for key rotation by passing a list to
|
``secret_key``.
|
|
.. versionchanged:: 0.18
|
``algorithm`` was added as an argument to the class constructor.
|
|
.. versionchanged:: 0.14
|
``key_derivation`` and ``digest_method`` were added as arguments
|
to the class constructor.
|
r! ú django-concatÚdefault_key_derivationó itsdangerous.Signeró .N)r0 ÚsaltÚsepÚkey_derivationr" Ú algorithmc C s t || _t|| _| jtkr&td|d k r8t|}nd}|| _|d krP| j}|| _|d krd| j }|| _
|
|d kr|t | j
|
}|| _ d S )NzThe given separator cannot be used because it may be contained in the signature itself. ASCII letters, digits, and '-_=' must not be used.r: ) r6 Ú secret_keysr r= r Ú
|
ValueErrorr< r9 r> r! r" r r? )r r0 r< r= r> r" r? r r r r# x s&
|
|
|
ÿ
|
|
zSigner.__init__)r c C s
|
| j d S )zThe newest (last) entry in the :attr:`secret_keys` list. This
|
is for compatibility from before key rotation support was added.
|
éÿÿÿÿ)r@ )r r r r r0 ¦ s zSigner.secret_keyr/ c C s´ |dkr| j d }nt|}| jdkrBt t| | j| ¡ ¡ ¡S | jdkrlt t| | jd | ¡ ¡ ¡S | jdkrt j
|
|| jd}| | j¡ | ¡ S | jdkr¨|S t d dS )
|
aü This method is called to derive the key. The default key
|
derivation choices can be overridden here. Key derivation is not
|
intended to be used as a security method to make a complex key
|
out of a short password. Instead you should use large random
|
secret keys.
|
|
:param secret_key: A specific secret key to derive from.
|
Defaults to the last item in :attr:`secret_keys`.
|
|
.. versionchanged:: 2.0
|
Added the ``secret_key`` parameter.
|
NrB Úconcatr8 s signerr )r% Únonez Unknown key derivation method) r@ r r> r, Úcastr r" r< r' r r& ÚupdateÚ TypeError)r r0 r( r r r Ú
|
derive_key s"
|
|
ÿ
|
|
zSigner.derive_key)r r c C s& t |}| ¡ }| j ||¡}t|S )z*Returns the signature for the given value.)r rH r? r r )r r r r r r r r Î s zSigner.get_signaturec C s t |}|| j | |¡ S )zSigns the given string.)r r= r )r r r r r ÚsignÕ s z Signer.sign)r r r c C s` z t |}W n tk
|
r" Y dS X t|}t| jD ]$}| |¡}| j |||¡r6 dS q6dS )z+Verifies the signature for the given value.FT)r Ú Exceptionr Úreversedr@ rH r? r )r r r r0 r r r r r Ú s
|
zSigner.verify_signature)Ú signed_valuer c C s^ t |}| j|kr$td| jd| | jd¡\}}| ||¡rF|S td|d|ddS )zUnsigns the given string.zNo z found in valuer z
|
Signature z does not match)ÚpayloadN)r r= r Úrsplitr )r rL r r r r r Úunsignë s
|
z Signer.unsignc C s, z| |¡ W dS tk
|
r& Y dS X dS )znOnly validates the given signed value. Returns ``True`` if
|
the signature exists and is valid.
|
TFN)rO r )r rL r r r Úvalidateù s
|
|
zSigner.validate)r: r; NNN)N) r r r r r) r* r+ r! r, r- r. r9 r5 Ú _t_secret_keyÚ_t_opt_str_bytesÚ _t_str_bytesÚOptionalr r# Úpropertyr r0 rH r rI r r rO rP r r r r r7 C s0
|
+ ù
|
ù .!r7 )r* r Útypingr, Úencodingr r r r Úexcr ÚUnionr5 r rS rT rR ÚIterablerQ r r r ÚListr6 r7 r r r r Ú<module> s
|
|
