kKj'vddlmZmZmZddlmZddlmZmZddl m Z m Z m Z m Z ddlmZmZddlmZmZddlmZmZdd lmZmZmZmZdd lmZdd lmZm Z m!Z!m"Z"m#Z#m$Z$dd l%m&Z&dd l'm(Z(m)Z)gdZ*e d'de(de+e,zde#dee,dzdedzde!e"ze zdzde,fdZ- d'de+e,zde#dee,dzdedzde!e"ze zdzde f dZ.e d'de de#dzdee,dzdedzde!e"ze zdzdef dZ/e d'de de#dzdee,dzdedzde!e"ze zdzdef dZ/ d'de e zde#dzdee,dzdedzde!e"ze zdzdeezf dZ/ d'deezde#dee,dzdedzde!e"ze zdzde e zf d Z0 d(d!e1e ede#de!e"ze zdzddfd"Z2 d)d#e ed$e!e"ze zd%e3de!e"zfd&Z4y)*)castoverloadUnion) Collection)GeneralJSONSerializationFlattenedJSONSerialization) RecipientCompactEncryptionGeneralJSONEncryptionFlattenedJSONEncryption) JWERegistrydefault_registry)perform_encryptperform_decrypt)represent_compactextract_compact)represent_general_jsonrepresent_flattened_jsonextract_general_jsonextract_flattened_json)setup_jwe_algorithms)KeyKeySetECKeyOKPKey KeyFlexible guess_key)to_bytes)Headerreject_unprotected_crit_header) rr rr r r r encrypt_compactdecrypt_compact encrypt_json decrypt_jsonrN protected plaintext public_key algorithmsregistry sender_keyreturncD|r t|}n|t}t|t|}t |}t ||dd}|j d||_|rt||d|_ ||_ t||t|} | jdS)a+Generate a JWE Compact Serialization. The JWE Compact Serialization represents encrypted content as a compact, URL-safe string. This string is:: BASE64URL(UTF8(JWE Protected Header)) || '.' || BASE64URL(JWE Encrypted Key) || '.' || BASE64URL(JWE Initialization Vector) || '.' || BASE64URL(JWE Ciphertext) || '.' || BASE64URL(JWE Authentication Tag) :param protected: protected header part of the JWE, in dict :param plaintext: the content (message) to be encrypted :param public_key: a public key used to encrypt the CEK :param algorithms: a collection (list, tuple, or set) of allowed algorithms :param registry: a JWERegistry to use :param sender_key: only required when using ECDH-1PU :return: JWE Compact Serialization in bytes r)Tencusezutf-8)rrr rr r check_use recipient_key_guess_sender_keyr+ recipientrrdecode) r&r'r(r)r*r+objr5keyouts \/Users/ahmed/devFolder/Ultron/claude-voice/.venv/lib/python3.12/site-packages/joserfc/jwe.pyr"r"3s4*5  # Ix ': ;C )#I J 4U ;CMM%!I0JM CMC" C C ::g value private_keyc|r t|}n|t}tt||}|j}|Jt ||d}|j d||_|rt|||_ t|||S)aExtract and validate the JWE Compact Serialization (in string, or bytes) with the given key. An JWE Compact Serialization looks like: .. code-block:: text :caption: line breaks for display purposes only OKOawDo13gRp2ojaHV7LFpZcgV7T6DVZKTyKOMTYUmKoTCVJRgckCL9kiMT03JGe ipsEdY3mx_etLbbWSrFr05kLzcSr4qKAq7YN7e9jwQRb23nfa6c9d-StnImGyFDb Sv04uVuxIp5Zms1gNxKKK2Da14B8S4rzVRltdYwam_lDp5XnZAYpQdb76FdIKLaV mqgfwX7XWRxv2322i-vDxRfqNzo_tETKzpVLzfiwQyeyPGLBIO56YJ7eObdv0je8 1860ppamavo35UgoRdbYaBcoh9QcfylQr66oc6vFWXRcZ_ZT2LawVCWTIy3brGPi 6UklfCpIMfIjf7iGdXKHzg :param value: a string (or bytes) of the JWE Compact Serialization :param private_key: a flexible private key to decrypt the serialization :param algorithms: a collection (list, tuple, or set) of allowed algorithms :param registry: a JWERegistry to use :param sender_key: only required when using ECDH-1PU :return: object of the ``CompactEncryption`` r.r/r0) rrrrr5rr2r3r4r+r)r<r=r)r*r+r7r5r8s r:r#r#_s6*5  # (5/8 4C I   K 6CMM%!I0JG C" Jr;r7cyNr7r(r)r*r+s r:r$r$s #r;cyr@rArBs r:r$r$s"%r;c|r t|}n|t}t|j|jD]Z}|r|j st ||d|_|jr0|Jt||dd}|jd||_\t||t|tr t|St|S)aGenerate a JWE JSON Serialization (in dict). The JWE JSON Serialization represents encrypted content as a JSON object. This representation is neither optimized for compactness nor URL safe. When calling this method, developers MUST construct an instance of a ``GeneralJSONEncryption`` or ``FlattenedJSONEncryption`` object. Here is an example:: from joserfc.jwe import GeneralJSONEncryption protected = {"enc": "A128CBC-HS256"} plaintext = b"hello world" header = {"jku": "https://server.example.com/keys.jwks"} # optional shared header obj = GeneralJSONEncryption(protected, plaintext, header) # add the recipients obj.add_recipient({"kid": "alice", "alg": "RSA1_5"}) # not configured a key bob_key = OctKey.import_key("bob secret") obj.add_recipient({"kid": "bob", "alg": "A128KW"}, bob_key) :param obj: an instance of ``GeneralJSONEncryption`` or ``FlattenedJSONEncryption`` :param public_key: a public key used to encrypt the CEK :param algorithms: a collection (list, tuple, or set) of allowed algorithms :param registry: a JWERegistry to use :param sender_key: only required when using ECDH-1PU :return: JWE JSON Serialization in dict r.Tr/r0)rrr! unprotected recipientsr+r4r3rr2r isinstancer rr)r7r(r)r*r+r5r8s r:r$r$sD*5  #"3??3^^ i22#4Y D#QI &&) ))J 4UCC MM% &)I #$C"#,-%c** #C ((r;datach|r t|}n|t}t|jdd|vr?t t t ||}t|j||t|||Stt t||}t|j||t|||S)aDecrypt the JWE JSON Serialization (in dict) to a ``GeneralJSONEncryption`` or ``FlattenedJSONEncryption`` object. :param data: JWE JSON Serialization in dict :param private_key: a flexible private key to decrypt the CEK :param algorithms: a collection (list, tuple, or set) of allowed algorithms :param registry: a JWERegistry to use :param sender_key: only required when using ECDH-1PU :return: an instance of ``GeneralJSONEncryption`` or ``FlattenedJSONEncryption`` r.rErF) rrr!getrrr_attach_recipient_keysrFrrr )rHr=r)r*r+ general_obj flattened_objs r:r%r%s"*5  #"488M#:;t*40H$+OQYZ {55{JO X..t4NPT/UW_` }77jQ x0r;rFc|D]<}t||d}|jd||_|s,t|||_>y)Nr/r0)rr2r3r4r+)rFr=r+r5r8s r:rKrKsB  YE: e"%  #4Y #KI  r;r5r8 use_randomct|ts|S|j}|jd}|r.t t t tf|j|}|S|rOt t t tf|j|d}||jd|j|Std)Nskidalgz Invalid key) rGrheadersrJrrrr get_by_kidpick_random_key add_headerkid ValueError)r5r8rOrSrQskeys r:r4r4s c6 " !G ;;v D E%-(#..*>? E%-(#*=*=gen*MN     2K ] ##r;)NNNr@)F)5typingrrrcollections.abcr_rfc7516.typesrr _rfc7516.modelsr r r r _rfc7516.registryrr_rfc7516.messagerr_rfc7516.compactrr _rfc7516.jsonrrrrjwarjwkrrrrrrutilrr*r r!__all__bytesstrr"r#r$r%listrKboolr4rAr;r:rjs((& ?@ &CC< $*.#'15 ))s{))3$& ) D ) '$. ) )^*.#'15 ) 3;))3$&)D ) '$. )  )X *.#'15 # #d"#3$&#D # '$. #  # # *.#'15 % %d"%3$&%D % '$. %  % %*.#'15 4) !8 84)d"4)3$&4)D 4) '$. 4)  :: 4)t*.#'15  "%? ?  3$& D  '$.  44 HnrLYs^$L3>LLQTZN]cLcfjLjL LQV$~$$)FNV$;$IM$ V^$r;