0j:ddlZddlZddlZddlZddlZejeZdZdZ Gdde Z Gdde Z Gdd e Z e Ze Ze je_dS) NcB |dS#|cYSxYw)Nzutf-8)encoding)encode)raws `/home/rurouni/.hermes/hermes-agent/venv/lib/python3.11/site-packages/msal/oauth2cli/assertion.py _str2bytesr s-zz7z+++ scrtjtj|SN)base64urlsafe_b64encodebinasciia2b_hexdecode) thumbprints r_encode_thumbprintrs*  #H$4Z$@$@ A A H H J JJc$eZdZ ddZ ddZdS)AssertionCreatorNXc td)a+Create an assertion in bytes, based on the provided claims. All parameter names are defined in https://tools.ietf.org/html/rfc7521#section-5 except the expires_in is defined here as lifetime-in-seconds, which will be automatically translated into expires_at in UTC. z Will be implemented by sub-class)NotImplementedError) selfaudienceissuersubject expires_at expires_in issued_at assertion_idkwargss rcreate_normal_assertionz(AssertionCreator.create_normal_assertions""DEEErc Zt|||||ffd t|dz dS)zCreate an assertion as a callable, which will then compute the assertion later when necessary. This is a useful optimization to reuse the client assertion. c(j|||fd|i|S)Nr)r!)aiser rs rz@AssertionCreator.create_regenerative_assertion..)s),,Q1MMMfMMr<r)r) AutoRefreshermax)rrrrrr s` rcreate_regenerative_assertionz.AssertionCreator.create_regenerative_assertion!sV7j N N N N N:b=!,,... .r)NrNN)Nr)__name__ __module__ __qualname__r!r,rrrrsLIL)- F F F F>A . . . . . .rrc eZdZdZddZdZdS)r*aCache the output of a factory, and auto-refresh it when necessary. Usage:: r = AutoRefresher(time.time, expires_in=5) for i in range(15): print(r()) # the timestamp change only after every 5 seconds time.sleep(1) c0||_||_i|_dSr )_factory _expires_in_buf)rfactoryrs r__init__zAutoRefresher.__init__6s % rcXd\}}tj}|j|d|kr@td|||||jzi|_ntd|j|S)N)rvaluerzRegenerating new assertionzReusing still valid assertion)timer6getloggerdebugr4r5)r EXPIRES_ATVALUEnows r__call__zAutoRefresher.__call__:s1 Eikk 9==Q ' '3 . . LL5 6 6 6 S4CS=STDII LL8 9 9 9y}}U###rN)r2)r-r.r/__doc__r8rBr0rrr*r*.sA$$$$$rr*c,eZdZ ddddZ ddZdS)JwtAssertionCreatorN)sha256_thumbprintc||_||_|pi|_|rt||jd<|rt||jd<dSdS)a6Construct a Jwt assertion creator. Args: key (str): An unencrypted private key for signing, in a base64 encoded string. It can also be a cryptography ``PrivateKey`` object, which is how you can work with a previously-encrypted key. See also https://github.com/jpadilla/pyjwt/pull/525 algorithm (str): "RS256", etc.. See https://pyjwt.readthedocs.io/en/latest/algorithms.html RSA and ECDSA algorithms require "pip install cryptography". sha1_thumbprint (str): The x5t aka X.509 certificate SHA-1 thumbprint. headers (dict): Additional headers, e.g. "kid" or "x5c" etc. sha256_thumbprint (str): The x5t#S256 aka X.509 certificate SHA-256 thumbprint. zx5t#S256x5tN)key algorithmheadersr)rrIrJsha1_thumbprintrKrFs rr8zJwtAssertionCreator.__init__Fsj*"}"  M'9:K'L'LDL $  F"4_"E"EDL    F Frrc ddl} tj} |||p||p| |z|p| |pttjd} |r|| d<| | pi | | |j|j|j }t|S#|j ds|j drt dxYw) zCreate a JWT Assertion. Parameters are defined in https://tools.ietf.org/html/rfc7523#section-3 Key-value pairs in additional_claims will be added into payload as-is. rN)audisssubexpiatjtinbf)rJrKRSESzSome algorithms requires "pip install cryptography". See https://pyjwt.readthedocs.io/en/latest/installation.html#cryptographic-dependencies-optional)jwtr;struuiduuid4updaterrIrJrKr startswithr= exception)rrrrrrrr not_beforeadditional_claimsr rWrApayload str_or_bytess rr!z+JwtAssertionCreator.create_normal_assertioncs$  ikk$f3# "2#43tz||#4#4   ('GEN(.B/// ::T^T\&SSLl++ + ~((.. x$.2K2KD2Q2Q x  wxxx s )6B AC1)NN)NNrNNNN)r-r.r/r8r!r0rrrErEEsa<@FFFFFF<OR:>"rrE)r;r r rYlogging getLoggerr-r=rrobjectrr*rESigner JwtSignerr!sign_assertionr0rrrhs    8 $ $KKK.....v...2$$$$$F$$$.=====*===B   .F r