a 0h@sddlmZddlmZddlZddlZddlmZddlm Z ddl m Z ddl m Z ddl m Z dd l mZdd l mZdd lmZdd lmZdd lmZddlmZddlmZddlmZGdddeZGdddeeZdS)) annotationsN)datetime)timezone) base64_decode) base64_encode) bytes_to_int) int_to_bytes) want_bytes) BadSignature)BadTimeSignature)SignatureExpired) _TSerialized) Serializer)SignercseZdZdZddddZddddd Zd d d d dZejd d ddd dddZ ejd!d ddddddZ d"d ddddfdd Z d#d dddddZ Z S)$TimestampSignerzWorks like the regular :class:`.Signer` but also records the time of the signing and can be used to expire signatures. The :meth:`unsign` method can raise :exc:`.SignatureExpired` if the unsigning failed because the signature is expired. int)returncCs ttS)zTReturns the current timestamp. The function must return an integer. )rtime)selfr@/var/www/auris/lib/python3.9/site-packages/itsdangerous/timed.py get_timestampszTimestampSigner.get_timestampr)tsrcCstj|tjdS)a Convert the timestamp from :meth:`get_timestamp` into an aware :class`datetime.datetime` in UTC. .. versionchanged:: 2.0 The timestamp is returned as a timezone-aware ``datetime`` in UTC rather than a naive ``datetime`` assumed to be UTC. )tz)r fromtimestamprutc)rrrrrtimestamp_to_datetime#sz%TimestampSigner.timestamp_to_datetime str | bytesbytes)valuercCs@t|}tt|}t|j}|||}||||S)z:Signs the given string and also attaches time information.)r rr rsepZ get_signature)rr timestampr!rrrsign-s   zTimestampSigner.signNF int | Nonezt.Literal[False]) signed_valuemax_agereturn_timestamprcCsdSNrrr%r&r'rrrunsign8szTimestampSigner.unsignTzt.Literal[True]ztuple[bytes, datetime]cCsdSr(rr)rrrr*@sboolztuple[bytes, datetime] | bytesc szt|}d}Wn2tyF}z|}|jp0d}WYd}~n d}~00t|j}||vrn|rb|td|d||d\}} d} d} ztt | } Wnt yYn0|dur| durz| | } Wn:t t tfy} ztd|d| WYd} ~ n d} ~ 00tt||| d| dur0td|d|dur|| } | |krrtd| d |d || | d| d krtd| d || | d|r|| | fS|S) aWorks like the regular :meth:`.Signer.unsign` but can also validate the time. See the base docstring of the class for the general behavior. If ``return_timestamp`` is ``True`` the timestamp of the signature will be returned as an aware :class:`datetime.datetime` object in UTC. .. versionchanged:: 2.0 The timestamp is returned as a timezone-aware ``datetime`` in UTC rather than a naive ``datetime`` assumed to be UTC. Nztimestamp missing)payloadrzMalformed timestamp)r-Z date_signedzSignature age z > z secondsrz < 0 seconds)superr*r r-r r!r rsplitrr Exceptionr ValueErrorOSError OverflowErrorstrrr )rr%r&r'resultZ sig_errorer!r Zts_bytesZts_intZts_dtexcZage __class__rrr*Hs`              )r%r&rcCs.z|j||dWdSty(YdS0dS)zeOnly validates the given signed value. Returns ``True`` if the signature exists and is valid.)r&TFN)r*r )rr%r&rrrvalidates  zTimestampSigner.validate)NF)NT)NF)N) __name__ __module__ __qualname____doc__rrr#toverloadr*r: __classcell__rrr8rrs    XrcsfeZdZUdZeZded<ddddfdd Zdd d d dddddZdd d dddddZ Z S)TimedSerializerzOUses :class:`TimestampSigner` instead of the default :class:`.Signer`. ztype[TimestampSigner]default_signerNzstr | bytes | Nonecabc.Iterator[TimestampSigner])saltrcstdt|S)NrD)r?castr.iter_unsigners)rrEr8rrrGszTimedSerializer.iter_unsignersFrr$r+zt.Any)sr&r'rErc Cst|}d}||D]z}z:|j||dd\}}||} |rL| |fWS| WStyhYqty} z| }WYd} ~ qd} ~ 00qtt|dS)aReverse of :meth:`dumps`, raises :exc:`.BadSignature` if the signature validation fails. If a ``max_age`` is provided it will ensure the signature is not older than that time in seconds. In case the signature is outdated, :exc:`.SignatureExpired` is raised. All arguments are forwarded to the signer's :meth:`~TimestampSigner.unsign` method. NT)r&r')r rGr*Z load_payloadr r r?rF) rrHr&r'rEZlast_exceptionsignerZbase64dr"r-errrrrloadss     zTimedSerializer.loadsztuple[bool, t.Any])rHr&rErcCs|j||d|idS)Nr&)Z load_kwargs)Z_loads_unsafe_impl)rrHr&rErrr loads_unsafeszTimedSerializer.loads_unsafe)N)NFN)NN) r;r<r=r>rrC__annotations__rGrKrLrArrr8rrBs   (rB) __future__rcollections.abcabcZcabcrtypingr?rrencodingrrrr r r7r r r serializerrrrIrrrBrrrrs&