+ Nj%^RIHt^RIHt^RIt^RIt^RIt^RI H t ^RI H t ^RI H t ^RI H t ^RIHt!RR 4t!R R ]4tRR R llt!RR]4tRRlt!RR4tR#)) annotationsN)_base64_alphabet) base64_decode) base64_encode) want_bytes) BadSignaturec2]tRt^tRtRRltRRltRtR#)SigningAlgorithmz_Subclasses must implement :meth:`get_signature` to provide signature generation functionality. c$V^8dQhRRRRRR/#keybytesvaluereturn)formats"U/data/cameron/venvs/serve_omidlab/lib/python3.14/site-packages/itsdangerous/signer.py __annotate__SigningAlgorithm.__annotate__s!$$$u$$c \4h)z2Returns the signature for the given key and value.)NotImplementedErrorselfrrs&&&r get_signatureSigningAlgorithm.get_signatures !##rc(V^8dQhRRRRRRRR/#)r rrrsigrboolr)rs"rrrs.HHEH%HeHHrc L\P!W0PW44#)z=Verifies the given signature matches the expected signature. )hmaccompare_digestr)rrrrs&&&&rverify_signature!SigningAlgorithm.verify_signatures ""3(:(:3(FGGrrN)__name__ __module__ __qualname____firstlineno____doc__rr$__static_attributes__rrrr r s$HHrr c&]tRt^tRtRRltRtR#) NoneAlgorithmzXProvides an algorithm that does not perform any signing and returns an empty signature. c$V^8dQhRRRRRR/#r r)rs"rrNoneAlgorithm.__annotate__$s!urc R#rrrs&&&rrNoneAlgorithm.get_signature$srrN)r&r'r(r)r*rr+rrrr-r-srr-c V^8dQhRRRR/#)r stringrrt.Anyr)rs"rrr(s  u u rc.\P!V4#)zDon't access ``hashlib.sha1`` until runtime. FIPS builds may not include SHA-1, in which case the import and use as a default would fail before the developer can configure something else. )hashlibsha1)r4s&r _lazy_sha1r9(s << rcR]tRt^0t$Rt]!]4tR]R&R RRllt RRlt R t R#) HMACAlgorithmz*Provides signature generation using HMACs.r5default_digest_methodNcV^8dQhRR/#)r digest_methodr5r)rs"rrHMACAlgorithm.__annotate__8s22e2rc 2Vf VPpWnR#N)r<r>)rr>s&&r__init__HMACAlgorithm.__init__8s   66M$1rc$V^8dQhRRRRRR/#r r)rs"rrr?>s!urc f\P!WVPR7pVP4#))msg digestmod)r"newr>digest)rrrmacs&&& rrHMACAlgorithm.get_signature>s$hhs1C1CDzz|r)r>rA) r&r'r(r)r* staticmethodr9r<__annotations__rBrr+rrrr;r;0s&4 $0 #;5;2 rr;c V^8dQhRRRR/#)r secret_key7str | bytes | cabc.Iterable[str] | cabc.Iterable[bytes]rz list[bytes]r)rs"rrrCs//G//rc\V\\34'd \V4.#VUu.uFp\V4NK up#uupirA) isinstancestrrr)rOss& r_make_keys_listrUCs?*sEl++:&''#- .:aJqM: .. .sAc]tRt^Lt$Rt]!]4tR]R&Rt R]R&RRR llt ] R R l4t RR R llt RRltRRltRRltRRltRRltRtR#)Signera^A signer securely signs bytes, then unsigns them to verify that the value hasn't been changed. The secret key should be a random string of ``bytes`` and should not be saved to code or version control. Different salts should be used to distinguish signing in different contexts. See :doc:`/concepts` for information about the security of the secret key and salt. :param secret_key: The secret key to sign and verify with. Can be a list of keys, oldest to newest, to support key rotation. :param salt: Extra key to combine with ``secret_key`` to distinguish signatures in different contexts. :param sep: Separator between the signature and value. :param key_derivation: How to derive the signing key from the secret key and salt. Possible values are ``concat``, ``django-concat``, or ``hmac``. Defaults to :attr:`default_key_derivation`, which defaults to ``django-concat``. :param digest_method: Hash function to use when generating the HMAC signature. Defaults to :attr:`default_digest_method`, which defaults to :func:`hashlib.sha1`. Note that the security of the hash alone doesn't apply when used intermediately in HMAC. :param algorithm: A :class:`SigningAlgorithm` instance to use instead of building a default :class:`HMACAlgorithm` with the ``digest_method``. .. versionchanged:: 2.0 Added support for key rotation by passing a list to ``secret_key``. .. versionchanged:: 0.18 ``algorithm`` was added as an argument to the class constructor. .. versionchanged:: 0.14 ``key_derivation`` and ``digest_method`` were added as arguments to the class constructor. r5r< django-concatrSdefault_key_derivationNc 0V^8dQhRRRRRRRRR R R R /#) r rOrPsaltstr | bytes | Nonesep str | byteskey_derivationz str | Noner>z t.Any | None algorithmzSigningAlgorithm | Noner)rs"rrSigner.__annotate__sF,5,5K,5!,5 ,5 # ,5 $ ,5+,5rc L\V4Vn\V4VnVP\9d \ R4hVe \V4pMRpW nVf VPpW@nVf VPpWPn Vf\VP4pW`n R#)zThe given separator cannot be used because it may be contained in the signature itself. ASCII letters, digits, and '-_=' must not be used.Nitsdangerous.Signer) rU secret_keysrr]r ValueErrorr[rYr_r<r>r;r`)rrOr[r]r_r>r`s&&&&&&&rrBSigner.__init__s)8 (C$S/ 88' '7   d#D)D  !!88N#1   66M$1  %d&8&89I+4rcV^8dQhRR/#)r rrr)rs"rrras$$E$rc (VPR,#)zThe newest (last) entry in the :attr:`secret_keys` list. This is for compatibility from before key rotation support was added. )rd)rs&rrOSigner.secret_keys ##rc V^8dQhRRRR/#)r rOr\rrr)rs"rrras==%7=5=rc VfVPR,pM \V4pVPR8XdJ\P!\ VP VPV,4P44#VPR8XdQ\P!\ VP VPR,V,4P44#VPR8XdM\P!WP R7pVPVP4VP4#VPR8XdV#\R4h) aThis method is called to derive the key. The default key derivation choices can be overridden here. Key derivation is not intended to be used as a security method to make a complex key out of a short password. Instead you should use large random secret keys. :param secret_key: A specific secret key to derive from. Defaults to the last item in :attr:`secret_keys`. .. versionchanged:: 2.0 Added the ``secret_key`` parameter. concatrXssignerr")rGnonezUnknown key derivation methodri) rdrr_tcastrr>r[rIr"rHupdate TypeError)rrOrJs&& r derive_keySigner.derive_keys  ))"-J#J/J   ( *66%!3!3DII 4J!K!R!R!TU U  O 366t))$))i*?**LMTTV  F *((:1C1CDC JJtyy !::<   F * ;< NNrc V^8dQhRRRR/#)r rr^rr r)rs"rrras[Trc NVPV4R# \dR#i;i)z^Only validates the given signed value. Returns ``True`` if the signature exists and is valid. TF)rr)rrs&&rvalidateSigner.validates(  KK %  s  $$)r`r>r_r[rdr])rc.NNNrA)r&r'r(r)r*rLr9r<rMrYrBpropertyrOrsrr{r$rrr+rrrrWrWLsf#V$0 #;5;#2C1,5\$$ =B"< " OrrWr1) __future__rcollections.abcabccabcr7r"typingroencodingrrrrexcrr r-r9r;rUrWrrrrs_" &##  H H $ $&/~~r