first commit

2026-09-14 23:22:10 +09:00
commit 9f9c8fb69b
4207 changed files with 1333187 additions and 0 deletions
@@ -0,0 +1,76 @@
+from __future__ import annotations
+
+from collections.abc import Callable
+from typing import Any
+from typing import TypedDict
+
+from joserfc.errors import InvalidClaimError
+from joserfc.jwt import BaseClaimsRegistry
+from joserfc.jwt import Claims
+from joserfc.jwt import JWTClaimsRegistry
+from joserfc.registry import Header
+
+
+class ClaimsOption(TypedDict, total=False):
+    essential: bool
+    allow_blank: bool | None
+    value: str | int | bool
+    values: list[str | int | bool] | list[str] | list[int] | list[bool]
+    validate: Callable[[BaseClaims, Any], bool]
+
+
+class BaseClaims(dict):
+    registry_cls = BaseClaimsRegistry
+    REGISTERED_CLAIMS = []
+
+    def __init__(
+        self,
+        claims: Claims,
+        header: Header,
+        options: dict[str, ClaimsOption] | None = None,
+        params: dict[str, Any] = None,
+    ):
+        super().__init__(claims)
+        self._validate_hooks = {}
+        self.header = header
+        if options:
+            self._extract_validate_hooks(options)
+        self.options = options or {}
+        self.params = params or {}
+
+    def _extract_validate_hooks(self, options: dict[str, ClaimsOption]):
+        for key in options:
+            validate = options[key].pop("validate", None)
+            if validate:
+                self._validate_hooks[key] = validate
+
+    def _run_validate_hooks(self):
+        for key in self._validate_hooks:
+            validate = self._validate_hooks[key]
+            if validate and key in self and not validate(self, self[key]):
+                raise InvalidClaimError(key)
+
+    def get_registered_claims(self):
+        rv = {}
+        for k in self.REGISTERED_CLAIMS:
+            if k in self:
+                rv[k] = self[k]
+        return rv
+
+    def validate(self, now=None, leeway=0):
+        validator = self.registry_cls(**self.options)
+        validator.validate(self)
+        self._run_validate_hooks()
+
+
+class JWTClaims(BaseClaims):
+    registry_cls = JWTClaimsRegistry
+    REGISTERED_CLAIMS = ["iss", "sub", "aud", "exp", "nbf", "iat", "jti"]
+
+    def validate(self, now=None, leeway=0):
+        if self.options:
+            validator = self.registry_cls(now, leeway, **self.options)
+        else:
+            validator = self.registry_cls(now, leeway)
+        validator.validate(self)
+        self._run_validate_hooks()