3 []@sddlZddlmZddlmZddlmZddlmZddlmZddlmZdd lm Z dd l m Z dd l m Z dd l m Z dd lmZddlmZGdddeZGdddeZdS)N)datetime) text_type) base64_decode) base64_encode) bytes_to_int) int_to_bytes) want_bytes) BadSignature)BadTimeSignature)SignatureExpired) Serializer)Signerc@s<eZdZdZddZddZddZdd d Zdd d ZdS)TimestampSignerzWorks like the regular :class:`.Signer` but also records the time of the signing and can be used to expire signatures. The :meth:`unsign` method can raise :exc:`.SignatureExpired` if the unsigning failed because the signature is expired. cCs ttjS)zTReturns the current timestamp. The function must return an integer. )inttime)selfr:/tmp/pip-build-w1as9q70/itsdangerous/itsdangerous/timed.py get_timestampszTimestampSigner.get_timestampcCs tj|S)zaUsed to convert the timestamp from :meth:`get_timestamp` into a datetime object. )rutcfromtimestamp)rtsrrrtimestamp_to_datetimesz%TimestampSigner.timestamp_to_datetimecCs@t|}tt|j}t|j}|||}|||j|S)z:Signs the given string and also attaches time information.)r rrrsepZ get_signature)rvalue timestamprrrrsign$s   zTimestampSigner.signNFc Cs(ytj||}d}Wn0tk rD}z|}|jp2d}WYdd}~XnXt|j}||krl|r`|td|d|j|d\}}ytt |}Wnt k rd}YnX|dk rtt |||d|dkrtd|d|dk r|j |} | |krt d| |f||j|d|r$||j|fS|S) a=Works like the regular :meth:`.Signer.unsign` but can also validate the time. See the base docstring of the class for the general behavior. If ``return_timestamp`` is ``True`` the timestamp of the signature will be returned as a naive :class:`datetime.datetime` object in UTC. Nztimestamp missing)payloadr)rZ date_signedzMalformed timestampzSignature age %s > %s seconds)runsignr rr rr rsplitrr Exceptionrrr r) rrmax_agereturn_timestampresultZ sig_errorerrZagerrrr,s>         zTimestampSigner.unsignc Cs,y|j||ddStk r&dSXdS)zeOnly validates the given signed value. Returns ``True`` if the signature exists and is valid.)r"TFN)rr )rZ signed_valuer"rrrvalidatees zTimestampSigner.validate)NF)N) __name__ __module__ __qualname____doc__rrrrr&rrrrrs  9rc@s(eZdZdZeZdddZd ddZdS) TimedSerializerzOUses :class:`TimestampSigner` instead of the default :class:`.Signer`. NFc Cst|}d}x||j|D]n}y.|j||dd\}}|j|} |rH| |fS| Stk r`Yqtk r} z | }WYdd} ~ XqXqW|dS)aReverse of :meth:`dumps`, raises :exc:`.BadSignature` if the signature validation fails. If a ``max_age`` is provided it will ensure the signature is not older than that time in seconds. In case the signature is outdated, :exc:`.SignatureExpired` is raised. All arguments are forwarded to the signer's :meth:`~TimestampSigner.unsign` method. NT)r#)r Ziter_unsignersrZ load_payloadr r ) rsr"r#saltZlast_exceptionsignerZbase64drrerrrrrloadsvs zTimedSerializer.loadscCsd|i}i}|j||||S)Nr")Z_loads_unsafe_impl)rr,r"r-Z load_kwargsZload_payload_kwargsrrr loads_unsafeszTimedSerializer.loads_unsafe)NFN)NN)r'r(r)r*rZdefault_signerr0r1rrrrr+os r+)rr_compatrencodingrrrrr excr r r serializerr r.rrr+rrrrs            ^