e744336385
C-6: ConnectorRuntime enforces capability_mask per operation.
READ-only ACs cannot invoke MUTATE operations (wipe, lock, retire).
C-7: AC validated against database (exists, active, not expired)
before connector invocation.
C-9: Delegated AC capability bounded by delegator's capability.
C-10: Command counter uses atomic SQL increment with limit check.
M-23: expire_stale() uses same atomic SQL pattern.
H-1: Sensitive credential fields hidden from repr/logs via repr=False.
H-2: Stub backend requires ALLOW_STUB_CREDENTIALS=true to activate.
H-3: Kerberos backend raises CredentialResolutionError instead of
returning stub ticket.
H-4: Chronicle INTENT emitted before execution, RESULT after.
H-5: device_id validated as UUID before Graph API URL interpolation.
H-8: ConnectorRuntime enforces governance for all connector invocations.
Signed-off-by: Tyler King <tking@guildhouse.dev>
78 lines
1.8 KiB
Python
78 lines
1.8 KiB
Python
from .api_jwk import PyJWK, PyJWKSet
|
|
from .api_jws import (
|
|
PyJWS,
|
|
get_algorithm_by_name,
|
|
get_unverified_header,
|
|
register_algorithm,
|
|
unregister_algorithm,
|
|
)
|
|
from .api_jwt import PyJWT, decode, decode_complete, encode
|
|
from .exceptions import (
|
|
DecodeError,
|
|
ExpiredSignatureError,
|
|
ImmatureSignatureError,
|
|
InvalidAlgorithmError,
|
|
InvalidAudienceError,
|
|
InvalidIssuedAtError,
|
|
InvalidIssuerError,
|
|
InvalidKeyError,
|
|
InvalidSignatureError,
|
|
InvalidTokenError,
|
|
MissingRequiredClaimError,
|
|
PyJWKClientConnectionError,
|
|
PyJWKClientError,
|
|
PyJWKError,
|
|
PyJWKSetError,
|
|
PyJWTError,
|
|
)
|
|
from .jwks_client import PyJWKClient
|
|
from .warnings import InsecureKeyLengthWarning
|
|
|
|
__version__ = "2.12.1"
|
|
|
|
__title__ = "PyJWT"
|
|
__description__ = "JSON Web Token implementation in Python"
|
|
__url__ = "https://pyjwt.readthedocs.io"
|
|
__uri__ = __url__
|
|
__doc__ = f"{__description__} <{__uri__}>"
|
|
|
|
__author__ = "José Padilla"
|
|
__email__ = "hello@jpadilla.com"
|
|
|
|
__license__ = "MIT"
|
|
__copyright__ = "Copyright 2015-2026 José Padilla"
|
|
|
|
|
|
__all__ = [
|
|
"PyJWS",
|
|
"PyJWT",
|
|
"PyJWKClient",
|
|
"PyJWK",
|
|
"PyJWKSet",
|
|
"decode",
|
|
"decode_complete",
|
|
"encode",
|
|
"get_unverified_header",
|
|
"register_algorithm",
|
|
"unregister_algorithm",
|
|
"get_algorithm_by_name",
|
|
# Warnings
|
|
"InsecureKeyLengthWarning",
|
|
# Exceptions
|
|
"DecodeError",
|
|
"ExpiredSignatureError",
|
|
"ImmatureSignatureError",
|
|
"InvalidAlgorithmError",
|
|
"InvalidAudienceError",
|
|
"InvalidIssuedAtError",
|
|
"InvalidIssuerError",
|
|
"InvalidKeyError",
|
|
"InvalidSignatureError",
|
|
"InvalidTokenError",
|
|
"MissingRequiredClaimError",
|
|
"PyJWKClientConnectionError",
|
|
"PyJWKClientError",
|
|
"PyJWKError",
|
|
"PyJWKSetError",
|
|
"PyJWTError",
|
|
]
|