+ P(¸i¥!ãó`€^RIt^RIHt^RIHt^RIHt^RIHt^RIH t !RR] 4t R#) éN)ÚOptional)ÚUnion©Úgenerate_token)Újwt)ÚBearerTokenGeneratorcó¦aa€]tRt^ toRtRV3RlltRtRtV3RlRltV3RlRlt V3R lR lt V3R lR lt V3R lRlt Rt RtVtV;t#)ÚJWTBearerTokenGeneratora›A JWT formatted access token generator. :param issuer: The issuer identifier. Will appear in the JWT ``iss`` claim. :param \\*\\*kwargs: Other parameters are inherited from :class:`~authlib.oauth2.rfc6750.token.BearerTokenGenerator`. This token generator can be registered into the authorization server:: class MyJWTBearerTokenGenerator(JWTBearerTokenGenerator): def get_jwks(self): ... def get_extra_claims(self, client, grant_type, user, scope): ... authorization_server.register_token_generator( "default", MyJWTBearerTokenGenerator( issuer="https://authorization-server.example.org" ), ) cóT<€\SV`VPW44WnW nR#)N)ÚsuperÚ__init__Úaccess_token_generatorÚissuerÚalg)ÚselfrrÚrefresh_token_generatorÚexpires_generatorÚ __class__s&&&&&€Úb/Users/agent/.openclaw/workspace/venv/lib/python3.14/site-packages/authlib/oauth2/rfc9068/token.pyr Ú JWTBearerTokenGenerator.__init__"s*ø€ô ‰ÑØ × 'Ñ 'Ð)@ô ðŒ ØŽóc ó€\4h)zªReturn the JWKs that will be used to sign the JWT access token. Developers MUST re-implement this method:: def get_jwks(self): return load_jwks("jwks.json") )ÚNotImplementedError)rs&rÚget_jwksÚ JWTBearerTokenGenerator.get_jwks/s €ô"Ó#Ð#rc ó€/#)a1Return extra claims to add in the JWT access token. Developers MAY re-implement this method to add identity claims like the ones in :ref:`specs/oidc` ID Token, or any other arbitrary claims:: def get_extra_claims(self, client, grant_type, user, scope): return generate_user_info(user, scope) ©©rÚclientÚ grant_typeÚuserÚscopes&&&&&rÚget_extra_claimsÚ(JWTBearerTokenGenerator.get_extra_claims8s €ðˆ rcóF<€V^8„dQhRS[S[S[S[,3,/#©éÚreturn)rÚstrÚlist)ÚformatÚ __classdict__s"€rÚ __annotate__Ú$JWTBearerTokenGenerator.__annotate__Bs!ø€÷ &ñ &±E¹#¹tÁC½y¸.Õ4Iñ &rc ó"€VP4#)a*Return the audience for the token. By default this simply returns the client ID. Developers MAY re-implement this method to add extra audiences:: def get_audiences(self, client, user, scope): return [ client.get_client_id(), resource_server.get_id(), ] )Ú get_client_id)rrr!r"s&&&&rÚ get_audiencesÚ%JWTBearerTokenGenerator.get_audiencesBs€ð×#Ñ#Ó%Ð%rcó0<€V^8„dQhRS[S[,/#r&)rr))r+r,s"€rr-r.Osø€÷ñ™x©}ñrc ó€R#)ayAuthentication Context Class Reference. Returns a user-defined case sensitive string indicating the class of authentication the used performed. Token audience may refuse to give access to some resources if some ACR criteria are not met. :ref:`specs/oidc` defines one special value: ``0`` means that the user authentication did not respect `ISO29115`_ level 1, and will be refused monetary operations. Developers MAY re-implement this method:: def get_acr(self, user): if user.insecure_session(): return "0" return "urn:mace:incommon:iap:silver" .. _ISO29115: https://www.iso.org/standard/45138.html Nr©rr!s&&rÚget_acrÚJWTBearerTokenGenerator.get_acrOs€ñ rcó0<€V^8„dQhRS[S[,/#r&)rÚint)r+r,s"€rr-r.asø€÷ ñ ¡X©c¥]ñ rc ó€R#)aMUser authentication time. Time when the End-User authentication occurred. Its value is a JSON number representing the number of seconds from 1970-01-01T0:0:0Z as measured in UTC until the date/time. Developers MAY re-implement this method:: def get_auth_time(self, user): return datetime.timestamp(user.get_auth_time()) Nrr5s&&rÚ get_auth_timeÚ%JWTBearerTokenGenerator.get_auth_timeaó€ñrcó@<€V^8„dQhRS[S[S[,,/#r&)rr*r))r+r,s"€rr-r.lsø€÷ ñ ™x©©S­ Õ2ñ rc ó€R#)aKAuthentication Methods References. Defined by :ref:`specs/oidc` as an option list of user-defined case-sensitive strings indication which authentication methods have been used to authenticate the user. Developers MAY re-implement this method:: def get_amr(self, user): return ["2FA"] if user.has_2fa_enabled() else [] Nrr5s&&rÚget_amrÚJWTBearerTokenGenerator.get_amrlr=rcó <€V^8„dQhRS[/#r&)r))r+r,s"€rr-r.wsø€÷"ñ"¹#ñ"rc ó€\^4#)z¿JWT ID. Create an unique identifier for the token. Developers MAY re-implement this method:: def get_jti(self, client, grant_type, user scope): return generate_random_string(16) rrs&&&&&rÚget_jtiÚJWTBearerTokenGenerator.get_jtiws€ô˜bÓ!Ð!rcóâ€\\P!44pWPPW4,pRVPRVRVP 4RVRVP WW44RV/pV'dVP 4VR&MVP 4VR&TPYT4TR&TPT4;p'dY‡R &TPT4;p 'dY—R &TPT4;p 'dY§R &TPTPYY444R TPR R/p \P!T TTP!4RR7p T P#4#)ÚissÚexpÚ client_idÚiatÚjtir"ÚsubFÚaudÚ auth_timeÚacrÚamrrÚtypzat+jwt)ÚkeyÚcheck)r9ÚtimeÚ_get_expires_inrr0rDÚ get_user_idr1r;r6r@Úupdater#rrÚencoderÚdecode) rrr r!r"ÚnowÚ expires_inÚ token_datarNrOrPÚheaderÚ access_tokens &&&&& rrÚ.JWTBearerTokenGenerator.access_token_generatorsm€Ü”$—)’)“+ÓˆØ×/Ñ/°ÓCÕCˆ ð 4—;‘;Ø :Ø ˜×-Ñ-Ó/Ø 3Ø 4—<‘< °DÓ@Ø Uð  ˆ ÷ Ø $× 0Ñ 0Ó 2ˆJuÒ ð!'× 4Ñ 4Ó 6ˆJuÑ ð ð!%× 2Ñ 2°6ÀÓ GˆJuÑ ð×*Ñ*¨4Ó0Ð 0ˆ9Ö 0Ø&/{Ñ #ð —,‘,˜tÓ$Ð $ˆ3Ö $Ø #uÑ ð —,‘,˜tÓ$Ð $ˆ3Ö $Ø #uÑ ð ×ј$×/Ñ/°ÀDÓPÔQ𘟙 5¨(Ð3ˆä—z’zØ Ø Ø— ‘ “Øô  ˆ ð ×"Ñ"Ó$Ð$r)rr)ÚRS256NN)Ú__name__Ú __module__Ú __qualname__Ú__firstlineno__Ú__doc__r rr#r1r6r;r@rDrÚ__static_attributes__Ú__classdictcell__Ú __classcell__)rr,s@@rr r sWù‡€ñ÷. ò$ò÷ &ð &÷ð÷$ ð ÷ ð ÷"ð"÷Y%òY%rr ) rTÚtypingrrÚauthlib.common.securityrÚ authlib.joserÚauthlib.oauth2.rfc6750.tokenrr rrrÚrms&ðÛ ÝÝå2ÝÝ=ôP%Ð2öP%r