wg\jcSSKrSSKJr SSKJrJr SSKJrJr SSKJrJ r SSKJ r J r SSK J r SSKJr S rS r\"S S S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5\"SS S S5S. r/SQr"SS\5r\R*r\R,r\R.r\R0r"SS5rg) N)common) JWException JWKeyNotFound)JWSEHeaderParameterJWSEHeaderRegistry)base64url_decodebase64url_encode) json_decode json_encode)JWA)JWKSetii@ AlgorithmFTzEncryption AlgorithmzCompression Algorithmz JWK Set URLz JSON Web KeyzKey IDz X.509 URLzX.509 Certificate Chainz"X.509 Certificate SHA-1 Thumbprintz$X.509 Certificate SHA-256 ThumbprintTypez Content TypeCritical) algenczipjkujwkkidx5ux5cx5tzx5t#S256typctycrit)zRSA-OAEPz RSA-OAEP-256A128KWA192KWA256KWdirzECDH-ESzECDH-ES+A128KWzECDH-ES+A192KWzECDH-ES+A256KW A128GCMKW A192GCMKW A256GCMKWzPBES2-HS256+A128KWzPBES2-HS384+A192KWzPBES2-HS512+A256KWz A128CBC-HS256z A192CBC-HS384z A256CBC-HS512A128GCMA192GCMA256GCMc0^\rSrSrSrSU4SjjrSrU=r$)InvalidJWEData5zjInvalid JWE Object. This exception is raised when the JWE Object is invalid and/or improperly formatted. cx>SnU(aUnOSnU(aUS[U5-- n[[U]U5 g)Nz!Unknown Data Verification Failurez {%s})strsuperr(__init__)selfmessage exceptionmsg __class__s G/home/edenadmin/noVNC/venv/lib/python3.13/site-packages/jwcrypto/jwe.pyr-InvalidJWEData.__init__<s: C5C  7S^+ +C nd,S1)NN)__name__ __module__ __qualname____firstlineno____doc__r-__static_attributes__ __classcell__)r2s@r3r(r(5s 22r5r(c\rSrSrSrSSjrSrSr\S5r \ RS5r S r SS jr S r S rSS jrSSjrSrSr\4SjrSSjrSSjr\S5r\S5r\S5rSrSrSrSrg)JWENz?JSON Web Encryption object This object represent a JWE token. Nc SUl0UlSUl[[5UlXlU(aUR RU5 Ub2[U[5(aXlOURS5UlSUl SUl U(aX@RS'U(a:[U[5(a [U5nO [U5 X RS'U(a:[U[5(a [U5nO [U5 X0RS'U(aXPlU(aUR!XgS9 gU(a [#S5eg)a>Creates a JWE token. :param plaintext(bytes): An arbitrary plaintext to be encrypted. :param protected: A JSON string with the protected header. :param unprotected: A JSON string with the shared unprotected header. :param aad(bytes): Arbitrary additional authenticated data :param algs: An optional list of allowed algorithms :param recipient: An optional, default recipient key :param header: An optional header for the default recipient :param header_registry: Optional additions to the header registry :param flattened: Use flattened serialization syntax (default True) Nutf-8aad protected unprotected)headerz-Header is allowed only with default recipient) _allowed_algsobjects plaintextrJWEHeaderRegistryheader_registry flattenedupdate isinstancebytesencodecek decryptlogdictr r add_recipient ValueError) r.rIrDrErCalgs recipientrFrKrLs r3r- JWE.__init__Ts" 12CD"   ' ' 8  )U++!*!*!1!1'!: "%LL  )T**' 2 I&(1LL % +t,,)+6 K(*5LL ' !%     y  8 LM Mr5cUR=(d [nX;a [S5e[R"U5$NzAlgorithm not allowed)rGdefault_allowed_algsInvalidJWEOperationr keymgmt_algr.namealloweds r3 _jwa_keymgmtJWE._jwa_keymgmts4$$<(<  %&=> >t$$r5cUR=(d [nX;a [S5e[R"U5$rZ)rGr[r\r encryption_algr^s r3_jwa_enc JWE._jwa_encs6$$<(<  %&=> >!!$''r5cHUR(a UR$[$)zjAllowed algorithms. The list of allowed algorithms. Can be changed by setting a list of algorithm names. )rGr[r.s r3 allowed_algsJWE.allowed_algss   %% %' 'r5cP[U[5(d [S5eXlg)NzAllowed Algs must be a list)rNlist TypeErrorrG)r.rVs r3rirjs!$%%9: :!r5c[UR55HnX2;dM [SU-5e URU5 U$)NzDuplicate header: "%s")rlkeysr(rM)r.h1h2ks r3_merge_headersJWE._merge_headerss>bggiAw$%=%ABB! "  r5c40nSUR;a)[URS5nURX#5nSUR;a)[URS5nURX$5nU(a[U5nURX%5nU$)NrDrE)rHr rs)r.rFjhphuhrhs r3_get_jose_headerJWE._get_jose_headers  $,, &T\\+67B$$R,B DLL (T\\-89B$$R,B V$B$$R,B r5cURSS5nUc [S5eURU5nURSS5nUc [S5eURU5nX54$)NrzMissing "alg" from headersrzMissing "enc" from headers)getr(rare)r.rvalgnamerencnamers r3_get_alg_enc_from_headersJWE._get_alg_enc_from_headerssi&&% ? !=> >(&&% ? !=> >mmG$xr5c [URRSS55nSUR;aUS[URS5-- nURS5nURSS5nUS:Xa$[R "UR 5SS nOUc UR nO [S 5eURURXF5upxn XpRS 'XRS 'XRS 'g)NrDrC.rBrDEFUnknown compressioniv ciphertexttag) r rHr}rPzlibcompressrIrUencryptrQ) r.rrrvrCrdatarrrs r3_encrypt JWE._encryptst||// R@A DLL 3)$,,u*=>> >Cjj!66%& u ==026D  >>D23 3!kk$((C> T%/ \"! Ur5cURc [S5e[UR[5(d [S5e[U[5(a [ U5nUR U5nURU5upE0nU(aX&S'URXRURU5nUSUl SU;aUSUS'SU;a=[URSS55nURXS5n [ U 5US'S UR;aURXEU5 S UR;aURS R!U5 gUR"(aSUR;dSUR;a/URS '0n SUR;aURR%S5U S'SUR;aURR%S5U S'URS R!U 5 URS R!U5 gURR'U5 gU/URS 'g) aEncrypt the plaintext with the given key. :param key: A JWK key or password of appropriate type for the 'alg' provided in the JOSE Headers. :param header: A JSON string representing the per-recipient header. :raises ValueError: if the plaintext is missing or not of type bytes. :raises ValueError: if the compression type is unknown. :raises InvalidJWAAlgorithm: if the 'alg' provided in the JOSE headers is missing or unknown, or otherwise not implemented. NzMissing plaintextzPlaintext must be 'bytes'rFrQek encrypted_keyz{}r recipients)rIrUrNrOrSr rzrwrap wrap_key_sizerQr r}rsrHrappendrLpoprM) r.keyrFrvrrrecwrappedhnhns r3rTJWE.add_recipients >> !01 1$..%0089 9 fd # # (F  " "6 *11"5 "M((3 1 1488R@5> 7?#*4=C w CGGHd34A$$Q(9:B'OCM t|| + MM#B ' 4<< ' LL & - -c 2 ^^$,,.(dll2J-/ \*"dll2)-)9)9/)JAo&t||+"&,,"2"28"?ACc!#3C 4D#EK #%0]1C%DM"|-c%j9E s"$&L!|,CA&#-,S-AB/*3&1#h-&@(  %,,Q/-#c)(_)=>(s?$/H $>CMs# #r5cUHLnX R;a[SU-5eURUR(aM@[SU-5e g)NzUnknown critical header: "%s"z!Unsupported critical header: "%s")rKr( supported)r.rrrs r3 _check_critJWE._check_critjsZA,,,$%Dq%HII++A.888(*023*455 r5c URX2RXE5n URXXxU 5n URR S5 XlU $)NSuccess)unwraprdecryptrRrrQ) r.rrrenckeyrFrCrrrrQrs r3_unwrap_decryptJWE._unwrap_decryptssFjj//@{{3RS9 y) r5c rURURSS55nURURS055 UH?nXPR;dMURR XP5(aM6[ S5e UR URSS55nURURSS55n[URRSS55nSUR;aUS [URS5-- nURS 5n[U[5(aUn S UR;aNURURS 5n U (d'[S R!URS 55eU n U Hmn UR#XgU URS S5XHURSURSURS5 n UR$R'S5 O SUR$;a [S5eONUR#XgUURS S5XHURSURSURS5 n URSS5nUS:Xa[/W 5[0:a[ SS[0S3-5e[2R4"[2R6*S9nUR9X5UlUR<(dUR>(dSUl[ SSUS3-5egUcW Ulg[AS5e![(a`n U RS U R+55nUR$R'SR!U[-U 555 Sn A GM Sn A ff=f)NrFrzFailed header checkrrrDrrCrrBrzKey ID {} not in key setrr5rrrrzKey [{}] failed: [{}]zNo working key found in key setrrz+Compressed data exceeds maximum allowedsizez ())wbitsz2Compressed data exceeds maximum allowedoutput sizer)!rzr}rrK check_headerr(rarer rHrPrNr jose_headerget_keysrformatrrRr Exception thumbprintreprrdefault_max_compressed_sizer decompressobj MAX_WBITS decompressrIunconsumed_taileofrU)r.rppe max_plaintextrvhdrrrrCrokid_keysrrrrkeyidrdos r3_decrypt JWE._decrypt|se  " "3778T#: ; +,C***++88CC()>?? ud 34mmBFF5$/0t||// R@A DLL 3)$,,u*=>> >Cjj! c6 " "D(((<<(8(8(?@'(B(I(I(,(8(8(?)ABB <//!030M02d9K04 \0J04 U0C ED OO**95/#$EFF0''#(+(E(*d1C(, \(B(, U(; =D 66%& u 4y66$!"=!>a@ABB##4>>/:B]]4?DN!!!%$"&(q$9:;;*0  !DN23 3=!<EE%8EOO**+B+I+I+0$q',;<<> "')-doo)>"?@ @!E!!]33%) OO**>DG+CDDE Aa//!%J&&~Q'?@@ As0C1D& D#>DD#& E80>E33E8cx0UlSUlSUl0n[U5n[ US5US'[ US5US'[ US5US'SU;a"[ US5nUR S5US'SU;a[ US5US'SU;a[ US5US'S U;aV/US 'US HGn0nS U;a[ US 5US 'S U;a[ US 5US 'US RU5 MI O.S U;a[ US 5US 'S U;a[ US 5US 'X0lU(aURU5 gg![anURS 5n[U5S :wa [5Ue[ US5nUR S5US'[ US5n U S:wa[ US5US '[ US5US'[ US5US'[ US5US'SnANSnAff=f![an[S[U55UeSnAff=f)adDeserialize a JWE token. NOTE: Destroys any current status and tries to import the raw JWE provided. If a key is provided a decryption step will be attempted after the object is successfully deserialized. :param raw_jwe: a 'raw' JWE token (JSON Encoded or Compact notation) string. :param key: A (:class:`jwcrypto.jwk.JWK`) decryption key, or a (:class:`jwcrypto.jwk.JWKSet`) that contains a key indexed by the 'kid' header or (deprecated) a string containing a password (optional). :raises InvalidJWEData: if the raw object is an invalid JWE token. :raises InvalidJWEOperation: if the decryption fails. NrrrrDrBrErCrrrFrrrr5rzInvalid format)rHrIrQr rdecoder rrUsplitrr(rrr) r.raw_jwerodjweprrrekeys r3 deserializeJWE.deserializesj(  . C( 5"7+*4:6$"24 3E"F,+DK8%$&(k):;A%&XXg%6AkN D('24 3F'GAm$D=/U (*1$T!W-!"'!2+'Q03;)9$q')BAo&*473$"247";,+DG4% 5 C !147; B CsIC/E H .E8H H"B%H H HH H9H44H9cRUR(d [S5eUR$)NzPlaintext not available)rIr\rhs r3payload JWE.payload?s~~%&?@ @~~r5cURURRS55n[U5S:Xa [ S5eU$)NrFrzJOSE Header not available)rzrHr}rr\)r.rvs r3rJWE.jose_headerEs=  " "4<<#3#3H#= > r7a<%&AB B r5c6U"5nURU5 U$)zCreates a JWE object from a serialized JWE token. :param token: A string with the json or compat representation of the token. :raises InvalidJWEData: if the raw object is an invalid JWE token. :return: A JWE token :rtype: JWE )r)clstokenrs r3from_jose_tokenJWE.from_jose_tokenLse  r5c>[U[5(dgUR5UR5:H$![aY SUR0nUR UR 5 SUR0nUR UR 5 X#:Hs$f=f)NFrI)rNr?rrrIrMrH)r.otherdata1data2s r3__eq__ JWE.__eq__]s%%% ">>#u'88 8 " $..1E LL & %//2E LL '> !  "s 9A BBcdUR5$![a UR5s$f=fN)rr__repr__rhs r3__str__ JWE.__str__is/ #>># # #==? " #s //clSUR5S3$![a [UR5nURR S5nURR S5nURR S5nUR nSUS3SUS3-S US3-S US US 3-s$f=f) NzJWE.from_json_token("z")rDrErCzJWE(plaintext=z, z protected=z unprotected=zaad=z, algs=r)rrrrIrHr}rG)r.rIrDrErCrVs r3r JWE.__repr__os .*4>>+;*rsT 6C>4). {E4 > 5udD I 6tT J }eUD A ~ueT B xd ; {E5$ ? 8% M CU$d ,#$J$)5$8 vudD 9 ~udD A  D$ ="* %!2[2&..00,,00m.m.r5