+ P(i5^RIHt^RIHt^RIHt^RIHt^RIHt^RIHt^RIHt^RIH t ^R IH t ^R IH t ^R I H t ^R I Ht^R I Ht^RIHt^RIHt!RR4tRtRtRtR#))json_b64encode)to_bytes) to_unicode)urlsafe_b64encode)BadSignatureError) DecodeError)#InvalidCritHeaderParameterNameErrorInvalidHeaderParameterNameError)MissingAlgorithmError)UnsupportedAlgorithmError) ensure_dict)extract_header)extract_segment) JWSHeader) JWSObjectca]tRt^to]!.RO4tRt/tRRlt] R4t Rt RRlt Rt RRltR tRR ltR tR tR tRtRtV3RltRtVtR#)JsonWebSignatureiNcW nWnR#N)_private_headers _algorithms)self algorithmsprivate_headerss&&&^/Users/agent/.openclaw/workspace/venv/lib/python3.14/site-packages/authlib/jose/rfc7515/jws.py__init__JsonWebSignature.__init__*s /%cV'dVPR8wd\RV: 24hWPVP&R#)JWSzInvalid algorithm for JWS, N)algorithm_type ValueErrorALGORITHMS_REGISTRYname)cls algorithms&&rregister_algorithm#JsonWebSignature.register_algorithm.s7I44=:9-HI I2; /rc V\VR4pVPV4VPV4VPWV4wrS\ VP 4p\ \V44pRPWg.4p\ VPW44p RPWgV .4#)aGenerate a JWS Compact Serialization. The JWS Compact Serialization represents digitally signed or MACed content as a compact, URL-safe string, per `Section 7.1`_. .. code-block:: text BASE64URL(UTF8(JWS Protected Header)) || '.' || BASE64URL(JWS Payload) || '.' || BASE64URL(JWS Signature) :param protected: A dict of protected header :param payload: A bytes/string of payload :param key: Private key used to generate signature :return: byte N.) r_validate_private_headers_validate_crit_headers_prepare_algorithm_keyr protectedrrjoinsign) rr/payloadkey jws_headerr'protected_segmentpayload_segment signing_input signatures &&&& rserialize_compact"JsonWebSignature.serialize_compact4s y$/  &&y1 ##I.44YM *:+?+?@+HW,=> #4"FG %inn]&HI yy+iHIIrc \V4VP8d \R4h\V4pVP R^4wrEVP R^4wrg\T4p TPT 4\T R4p \T4p T'd T!T 4p \T4p \YR4p TPYT4wrTPYLT4'dT #\T 4h \dp\ R4ThRp?ii;i)aExact JWS Compact Serialization, and validate with the given key. If key is not provided, the returned dict will contain the signature, and signing input values. Via `Section 7.1`_. :param s: text of JWS Compact Serialization :param key: key used to verify the signature :param decode: a function to decode payload data :return: JWSObject :raise: BadSignatureError .. _`Section 7.1`: https://tools.ietf.org/html/rfc7515#section-7.1 zSerialization is too long.r+zNot enough segmentsNcompact)lenMAX_CONTENT_LENGTHr#rrsplitsplitr_extract_headerr-r_extract_payload_extract_signaturerr.verifyr)rsr3decoder7signature_segmentr5r6excr/r4r2r8rvr's&&&& rdeserialize_compact$JsonWebSignature.deserialize_compactQs q6D++ +9: : > A/0xxa/@ ,M1>1D1DT11M . $$56  ##I.y$/ "?3 WoG&'89 zI 644Z#N   Mc : :I##! >34# = >s3C-- D 8 DD c 2aaaa\S4oVVVV3Rlp\V\4'd-V!\P!V44p\ S4VR&V#VUu.uFqd!\P!V44NK ppR\ S4RV/#uupi)a.Generate a JWS JSON Serialization. The JWS JSON Serialization represents digitally signed or MACed content as a JSON object, per `Section 7.2`_. :param header_obj: A dict/list of header :param payload: A string/dict of payload :param key: Private key used to generate signature :return: JWSObject Example ``header_obj`` of JWS JSON Serialization:: { "protected: {"alg": "HS256"}, "header": {"kid": "jose"} } Pass a dict to generate flattened JSON Serialization, pass a list of header dict to generate standard JSON Serialization. c<S PV4S PVP4S PVP4S P VSS4wr\ VP4pRPVS .4p\VPWB44pR\V4R\V4/pVPeVPVR&V#)r+r/r8header) r,_reject_unprotected_critrNr-r/r.rr0rr1r) r4_alg_keyr5r7r8rIr3r2r6rs & r_sign.JsonWebSignature.serialize_json.._signs  * *: 6  ) )**;*; <  ' ' (<(< =44Z#NJD .z/C/C D  II'8/&JKM)$))M*HIIZ(9:Z 2B  ,)008 Irr2 signatures)r isinstancedictr from_dictr) r header_objr2r3rRdatahrTr6s f&ff @rserialize_jsonJsonWebSignature.serialize_jsonws()1  * j$ ' ',,Z89D(9DOK=GHZeI//23Z H:o6 jQQIs$Bc \VR4pVPR4pVf \R4h\V4p\ V4pV'd V!V4pRV9d6VP WEW4wrg\ WeR4pV'dV#\V4h.p Rp VR,F4p VP WEW4wrgV PV4V'dK2Rp K6 \ WR4pV 'dV#\V4h) aExact JWS JSON Serialization, and validate with the given key. If key is not provided, it will return a dict without signature verification. Header will still be validated. Via `Section 7.2`_. :param obj: text of JWS JSON Serialization :param key: key used to verify the signature :param decode: a function to decode payload data :return: JWSObject :raise: BadSignatureError .. _`Section 7.2`: https://tools.ietf.org/html/rfc7515#section-7.2 r!r2zMissing "payload" valuerTflatTFjson) rgetrrrB_validate_json_jwsrrappend) robjr3rFr6r2r4validrIheadersis_validrXs &&&& rdeserialize_json!JsonWebSignature.deserialize_jsons#u%''),  "78 8"?3"?3 WoG s " $ 7 7#! J:7B #B' 'l++J $ 7 7*! J NN: &5  ,w 0 I##rc \V\\34'dVPWV4#RV9dVPWV4#VP WV4#)aGenerate a JWS Serialization. It will automatically generate a Compact or JSON Serialization depending on the given header. If a header is in a JSON header format, it will call :meth:`serialize_json`, otherwise it will call :meth:`serialize_compact`. :param header: A dict/list of header :param payload: A string/dict of payload :param key: Private key used to generate signature :return: byte/dict r/)rUlisttupler[r9)rrNr2r3s&&&&r serializeJsonWebSignature.serializesV ftUm , ,&&v< < & &&v< <%%fs;;rc \V\4'dVPWV4#\V4pVP R4'd*VP R4'dVPWV4#VP WV4#)aDeserialize JWS Serialization, both compact and JSON format. It will automatically deserialize depending on the given JWS. :param s: text of JWS Compact/JSON Serialization :param key: key used to verify the signature :param decode: a function to decode payload data :return: dict :raise: BadSignatureError If key is not provided, it will still deserialize the serialization without verification. {})rUrVrgr startswithendswithrJ)rrEr3rFs&&&&r deserializeJsonWebSignature.deserializesp a  ((8 8 QK <<  !**T"2"2((8 8''77rctRV9d \4hVR,pW@P9d \4hVPV,pVPfVP'd \4hMW@P9d \4h\ V4'd V!W4pVP V4pWS3#)alg)r r$r r deprecatedcallable prepare_key)rrNr2r3rvr's&&&& rr.'JsonWebSignature._prepare_algorithm_keys  ') )Um .. .+- -,,S1    ####/11$ (( (+- - C==f&C##C(~rcVPeRVPP4pVPVP4pVFpW29gK \ V4h R#R#r)r!REGISTERED_HEADER_PARAMETER_NAMEScopyunionr )rrNnamesks&& rr,*JsonWebSignature._validate_private_headerssW  ,::??AEKK 5 56E>9!<< -rc >V'dRV9d \R4hR#R#)uGReject 'crit' when found in the unprotected header (RFC 7515 §4.1.11).critNr )runprotected_headers&&rrO)JsonWebSignature._reject_unprotected_crit"s &,>">1&9 9#? rcRV9dVR,p\V\4'd;\;QJdRV4F 'dK RM RM !RV44'g \R4hVPP 4pVP 'dVPVP 4pVF%pWC9d \V4hWA9gK\V4h R#R#)rc3B"TFp\V\4xK R#5ir)rUstr).0xs& r :JsonWebSignature._validate_crit_headers..+s=,8q 1c""LsFTN) rUrjallr r|r}rr~r )rrN crit_headersrrs&& rr-'JsonWebSignature._validate_crit_headers's V !&>LlD11=,8==,8=::6f==::??AE$$$ D$9$9:!>=a@@_=a@@ " rc@VPR4pV'g \R4hVPR4pV'g \R4h\V4p\V4pVPR4pV'd"\ V\ 4'g \R4hVP V4VPV4\Wx4p VPWV4wrRPWQ.4p \\V44p V PWV4'dV R3#V R3#) r/zMissing "protected" valuer8zMissing "signature" valuerNzInvalid "header" valuer+TF) r`rrrArUrVrOr-rr.r0rCrD) rr6r2rXr3r5rGr/rNr4r'r7r8s &&&&& rra#JsonWebSignature._validate_json_jws8s&NN;7 9: :&NN;7 9: :$%67#$56 ) *VT2267 7 %%f- ##I.y1 44Z#N  #4"FG &x0A'BC   Mc : :t# #5  rc&<V^8dQh/S[;R&#)r>)int)format __classdict__s"r __annotate__JsonWebSignature.__annotate__s$$%r)rr) rvjkujwkkidx5ux5cx5tzx5t#S256typctyr)NNr)__name__ __module__ __qualname____firstlineno__ frozensetr|r>r$r classmethodr(r9rJr[rgrlrsr.r,rOr-ra__annotate_func____static_attributes____classdictcell__)rs@rrrs(1 )% %&<< J:$$L1Rf0$d<$8*( =: A"!K rrc"\V\4#r)rr)header_segments&rrArAWs .+ 66rc$\V\R4#)r8rr)rGs&rrCrC[s ,k; GGrc$\V\R4#)r2r)r6s&rrBrB_s ?K CCrN)authlib.common.encodingrrrrauthlib.jose.errorsrrr r r r authlib.jose.utilrrrmodelsrrrrArCrBrrrsP2,.51+C?59),-A!A!H 7HDr