+ #cecsj^RIt^RIt^RIt^RIHt^RIHtHt^RIHtHt^RI H t ^RI H t ^RI HtHt^RIHt^RIH tR R R R R RRRRRRRRR/tRt!RR]4t!RR]4t!RR]4t!RR]4t!R R!]4t]!R"R#]44t!R$R%]4t!R&R'4tR#)(iN) deprecated) JWException JWKeyNotFound) json_decode json_encode)JWE)default_allowed_algs)JWKJWKSet)JWSissZIssuersubZSubjectaudZAudienceexpzExpiration Timenbfz Not Beforeiatz Issued AtjtizJWT IDTcs:aa]tRt^(toRtRV3RlltRtVtV;t#) JWTExpiredzfJSON Web Token is expired. This exception is raised when a token is expired according to its claims. c<RpV'd \V4pMRpV'dVR\V4,, p\\V`V4R#)Nz Token expired {%s})strsuperr__init__selfZmessageZ exceptionZmsg __class__&&& 1/usr/lib/python3.14/site-packages/jwcrypto/jwt.pyrZJWTExpired.__init__.s> g,C!C  7S^+ +C j$(-NN __name__ __module__ __qualname____firstlineno____doc__r__static_attributes____classdictcell__Z __classcell__r __classdict__@@rrr(s ..rrcs:aa]tRt^9toRtRV3RlltRtVtV;t#)JWTNotYetValidzrJSON Web Token is not yet valid. This exception is raised when a token is not valid yet according to its claims. cr)NzToken not yet validr)rrr*rrrrrZJWTNotYetValid.__init__@s> g,C'C  7S^+ +C nd,S1rrrrr'r)rr*r*9s 22rr*cs:aa]tRt^KtoRtRV3RlltRtVtV;t#)JWTMissingClaimkJSON Web Token claim is invalid. This exception is raised when a claim does not match the expected value. crNzInvalid Claim Valuer)rrr+rrrrrZJWTMissingClaim.__init__Qs> g,C'C  7S^+ +C ot-c2rrrrr'r)rr+r+Ks 33rr+cs:aa]tRt^\toRtRV3RlltRtVtV;t#)JWTInvalidClaimValuer,crr-)rrr.rrrrrZJWTInvalidClaimValue.__init__bs? g,C'C  7S^+ +C "D237rrrrr'r)rr.r.\s 88rr.cs:aa]tRt^mtoRtRV3RlltRtVtV;t#)JWTInvalidClaimFormatziJSON Web Token claim format is invalid. This exception is raised when a claim is not in a valid format. cr)NzInvalid Claim Formatr)rrr/rrrrrZJWTInvalidClaimFormat.__init__ss? g,C(C  7S^+ +C #T3C8rrrrr'r)rr/r/ms 99rr/cs:aa]tRt^~toRtRV3RlltRtVtV;t#)JWTMissingKeyIDzJSON Web Token is missing key id. This exception is raised when trying to decode a JWT with a key set that does not have a kid value in its header. cr)NzMissing Key IDr)rrr0rrrrrZJWTMissingKeyID.__init__s> g,C"C  7S^+ +C ot-c2rrrrr'r)rr0r0~s 33rr0cs:aa]tRt^toRtRV3RlltRtVtV;t#) JWTMissingKeyzJSON Web Token is using a key not in the key set. This exception is raised if the key that was used is not available in the passed key set. cr)Nz Missing Keyr)rrr1rrrrrZJWTMissingKey.__init__s> g,CC  7S^+ +C mT+C0rrrrr'r)rr1r1s 11rr1csa]tRt^toRtR(Rlt]R4t]PR4t]R4t ] PR4t ]R4t ] PR 4t ]R 4t ] PR 4t ]R 4t ] PR 4t R)Rlt ]R4t]PR4tRtRtRtRtRtRtRtRtRtRtRtRtRtRtRtR tR)R!ltR*R"lt ]!R#4t"R$t#R%t$R&t%R't&Vt'R#)+JWTz>JSON Web token object This object represent a generic token. Nc  sBRVnRVnRVnWPnRVnRVn^>&+#TZZ))(33&+#    &4<<< DLL11&+#    &3?#s##ggen%<*/D'E\*/D'C((A%%,C"%"& e#*/D'%*/D'    &3?#s##ggi(%c400"e3x((&();<<.3+S**Iy+ABB.3+C((A%% *C)#t44#&%C"?"3x00&(1CDD*-vx.@*A(-!$S!2!2Iy3I!J!J*-y).D*E(-(, %#&s8#4#4W#=#=(, %$>! $+,*/'    &"'D """rcsVVPe VP#VP4#rQ)r<rirGrHrrDJWT.expected_typeus+    *&& & --//rcs6VR9d WnR#\R4h)r z%Invalid value, must be 'JWS' or 'JWE'N)r r)r<rNrarUrrDrjs  "# DE ErcsbW9dR#VPPVR4pVeW2V&R#R#rQ)r7rM)rnamer?val&&& r_add_optional_claimZJWT._add_optional_claims3 > ""4. ?4L rcsW9dR#WP9d3VPV,fW2V&R#VPV,W!&R#R#rQ)r7)rrkr?Zdefval&&&&r_add_time_claimZJWT._add_time_claimsE >  ## #%-%t #//5 $rcs|RV9gRVP9dR#\\P!44VR&R#)rN)r7ruuidZuuid4rr?rUr_add_jti_claimZJWT._add_jti_claims- F?e4+;+;; DJJL)u rcs~VPfR#\\P!44pVPRV4VPRV4VPRV4VP RWVP ,4VP RW4VP RW4VP V4R#)Nr r r r rr)r7r^timernrpr_rs)rr?ZnowrOrrSZJWT._add_default_claimss    # $))+   /   /   / UF$--,?@ UF0 UF0 F#rcsxW9g W!,fR#\W!,\4'g \R4hR#)Nz"Claim %s is not a StringOrURI type)rKrr/rrkr?&&&r_check_string_claimZJWT._check_string_claims2  !5 &,,,'(LM M-rcsRW9g W!,fR#\W!,\4'dM\;QJdRV4F 'gK RM RM !RV44'd\RV: R24hR#\W!,\4'g\RV: R24hR#)Nc3sL"TFp\V\4'*xK R#5irQ)rKr)Z.0claim& rZ Z3JWT._check_array_or_string_claim..sB6%z%---6s"$TFClaim z contains non StringOrURI typesz is not a StringOrURI type)rKrhZanyr/rrurvr_check_array_or_string_claimZ JWT._check_array_or_string_claims  !5  flD ) )sB6BsssB6BBB+AEHJJCFL#..'8<?A A/rcsW9g W!,fR#\W!,4R# \dp\RT: R24ThRp?ii;i)Nrzz is not an integer)r^rNr/)rrkr?ermr_check_integer_claimZJWT._check_integer_claimsK  !5  @   @'0479>? @ @s' AAAcsHWV, 8d\RWV3,4hR#)z#Expired at %d, time: %d(leeway: %d)N)rrrxZlimitr[ror _check_expZJWT._check_exps1 6> !B"6F334 4 "rcsHWV,8d\RWV3,4hR#)z#Valid from %d, time: %d(leeway: %d)N)r*r~ror _check_nbfZJWT._check_nbfs1 6> ! !F!&vJ7"78 8 "rcsBVPRV4VPRV4VPRV4VPRV4VPRV4VPRV4VPRV4VPRV4VPfRV9d8VP VR,\ P !4VP 4RV9d:VPVR,\ P !4VP 4R#R#R# r r r r rrrtypN)rwr{r}r8rrtr9rrrrUr_check_default_claimsZJWT._check_default_claimss   /   / ))%8 !!%0 !!%0 !!%0   /   /    %u tyy{DLLIu tyy{DLLI &rcs&VPRV4VPRV4VPRV4VPRV4VPRV4VPRV4VPRV4VPRV4R#r)rwr{r})rrCrUrr>ZJWT._check_check_claimss    5    5 ))%> !!%6 !!%6 !!%6    5    5rc sVPRJdR#\VP4p\V\4'g \ 4hTPT4TPfR#TPP4EF:wr4Y19d\RT: R24hTR9d4Te.YAT,8wd\RT: RT: RY,: R24hKTKVTR 8XdTe\Y,\4'd Y,pM Y,.p\T\4'dTpMT.pRpTF pY9gK R pM T'g#\R PY1T,T44hKKTR 8XdZTeTPY,T^4EKTPY,\P!4TP4EKNTR 8XdZTeTP!Y,T^4EKuTP!Y,\P!4TP4EKTR8XdTTeMTP#T4TP#Y,48wd\RT: RY,: RT: R24hEKEKTfEKYAT,8wgEK\RT: RT: RY,: R24h R# \ d&pTPe \ R4ThRp?R#Rp?ii;i)FNz4Claims check requested but claims is not a json dictrzz is missingz Invalid 'z' value. Expected 'z' got 'Z'r Tz)Invalid '{}' value. Expected '{}' in '{}'r rrz ' value. 'z' does not normalize to ')r r r)r8rr?rKrLrNr/rZitemsr+r.rhformatrrtr9rnorm_typ) rr?r|rkZvalueZtclaimsZcclaimsZfoundrbs & r_check_provided_claimsZJWT._check_provided_claimss    &   -Ffd++ l", ""6*    % --335KD!%t&FGG,,$,)>. %788*?$ $!&,55"(,#)<.!%.."'#('!E$<$(E!%!2GNN $TlE;<<!%&$OOFL%;OOFL$))+t||L$OOFL%;OOFL$))+t||L$}}U+t}}V\/JJ2=A=C\\=B 4DEEK%$,)>. %788k6 !!-+-349:;   s5K K6K11K6csFVP4pRV9dV#RV,#)Z/z application/)Zlower)rrlZlcrOrrZ JWT.norm_typ5s$ YY[ "9I!B& &rc s\VP4pVP'dVPVnVP WP R7W nRVnR#)zSigns the payload. Creates a JWS token with the header as the JWS protected header and the claims as the payload. See (:class:`jwcrypto.jws.JWS`) for details on the exceptions that may be raised. :param key: A (:class:`jwcrypto.jwk.JWK`) key. )Z protectedr N)r r?r6 allowed_algsZ add_signaturer=rWr<rrBrZrOrmake_signed_tokenZJWT.make_signed_token<sE   :::!ZZAN {{3 #rc s\VPVP4pVP'dVPVnVP V4W nRVnR#)zEncrypts the payload. Creates a JWE token with the header as the JWE protected header and the claims as the plaintext. See (:class:`jwcrypto.jwe.JWE`) for details on the exceptions that may be raised. :param key: A (:class:`jwcrypto.jwk.JWK`) key. rN)rr?r=r6rZ add_recipientrWr<rrOrmake_encrypted_tokenZJWT.make_encrypted_tokenMsE  T[[ ) :::!ZZAN  #rc s.VnVPf \R4hVPV4pRp\ VP\ 4'dEVR8wd'\ 'd\RPV44hVPPpMo\ VP\4'dEVR8wd'\ 'd\RPV44hVPPpM \R4hV!V4VPPR4TPP&TnTPP*p\ T\,4'dTP/R 4pYPnTP34R# \dp\ TP\ 4'dTPPTnM;\ TP\4'dTPPTnTPPR P\!T444\ T\"4'd \%4ThhRp?ii;i) zValidate a JWT token that was deserialized w/o providing a key :param key: A (:class:`jwcrypto.jwk.JWK`) verification or decryption key, or a (:class:`jwcrypto.jwk.JWKSet`) that contains a key indexed by the 'kid' header. Nz Token emptyr zExpected {}, got JWSrzExpected {}, got JWEToken format unrecognizedZSuccesszValidation failed: [{}]zutf-8)r;rWrNrirKr JWT_expect_typerYrrdrreZappend ExceptionZ verifylogZ decryptlogreprrr1Z jose_headerr=payloadZbytesZdecoder?r)rrBZetZ validate_fnr|rs&& rvalidateZ JWT.validate^s! :: ]+ +  + +C 0 djj# & &U{ 6 = =b ABB**++K  C ( (U{ 6 = =b ABB**,,K89 9       & &y 1jj,, **$$ gu % %nnW-G  ##%! $**c**&*jj&:&:#DJJ,,&*jj&;&;#    & &)00a9 ;!]++#o1,  s#F I7&C I22I7c spVPR4pV^8Xd\4VnM"V^8Xd\4VnM \ R4hVP 'dVP VPnRVnVPPVR4V'dVPV4R#R#)a)Deserialize a JWT token. NOTE: Destroys any current status and tries to import the raw token provided. :param jwt: a 'raw' JWT token. :param key: A (:class:`jwcrypto.jwk.JWK`) verification or decryption key, or a (:class:`jwcrypto.jwk.JWKSet`) that contains a key indexed by the 'kid' header. Z.rN) Zcountr rWrrNr6rr;r@r)rrArBrTrmrr@ZJWT.deserializes IIcN 6DJ !VDJ89 9 :::&*jjDJJ #" sD)  MM#  rc s^V'g \R4hVPPV4#)aSerializes the object into a JWS token. :param compact(boolean): must be True. Note: the compact parameter is provided for general compatibility with the serialize() functions of :class:`jwcrypto.jws.JWS` and :class:`jwcrypto.jwe.JWE` so that these objects can all be used interchangeably. However the only valid JWT representation is the compact representation. :return: A json formatted string or a compact representation string :rtype: `str` z)Only the compact serialization is allowed)rNrW serialize)rZcompactrUrrZ JWT.serializes(HI Izz##G,,rc s6V!4pVPV4V#)zCreates a JWT object from a serialized JWT token. :param token: A string with the json or compat representation of the token. :raises InvalidJWEData or InvalidJWSObject: if the raw object is an invalid JWT token. :return: A JWT token :rtype: JWT )r@)ZclsrWZobjrOrfrom_jose_tokenZJWT.from_jose_tokense  rcs\V\4'gR#VPVP8H;'d;VPVP8H;'dVPVP8H#)F)rKr2r4r3rW)rZotherrUr__eq__Z JWT.__eq__s[%%%||u}},&& LLEMM )&& JJ%++ % &rcsfVP4# \dTP4u#i;irQ)rr__repr__rGrHr__str__Z JWT.__str__s/ #>># # #==? " #s 00cs \VP4pRVP R2RVP R2,RV R2,RVP R2,RVP R2,RVP R2,#)z JWT(header=z, zclaims=zjwt=zkey=None, algs=zdefault_claims=z check_claims=Z))rrWr3r4r6r7r8)rrAryrrZ JWT.__repr__s4::T\\N"-b)*cU"~! B/0!!1!1 2"5 6 t112!4 5 5r) r6r8r4r<r3r9r7r5r:r?r;r=rW)NNNNNNNNrQ)T)(r r!r"r#r$rZpropertyr=Zsetterr?rWr[r_rirDrnrprsrSrwr{r}rrrr>rrrrrr@rZ classmethodrrrrr%r&)r(s@rr2r2s >'@  ]]    ]] & & \\NN  ]]  __  F#P00FF 6* $N A@4 8 J 6L8\'$"$",&\<-&"&# 55rr2)rRrtrqrZjwcrypto.commonrrrrZ jwcrypto.jwerrrfZ jwcrypto.jwkrrZ jwcrypto.jwsr rgZJWTClaimsRegistryrrr*r+r.r/r0r1r2rrrrs !649$9 HIJ-LKH &*.."2[2$3k3"8;8"9K9" 3k3 3$1M1$@ 5@ 5r