OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	05/26/2025 10:13:33 PM	rwxr-xr-x
📄 __init__.py	0 bytes	08/06/2019 02:49:50 PM	rw-r--r--
📁 __pycache__	-	05/26/2025 10:13:33 PM	rwxr-xr-x
📁 endpoints	-	05/26/2025 10:13:33 PM	rwxr-xr-x
📄 exceptions.py	4.73 KB	08/06/2019 02:49:50 PM	rw-r--r--
📁 grant_types	-	05/26/2025 10:13:33 PM	rwxr-xr-x
📄 request_validator.py	13.2 KB	08/06/2019 02:49:50 PM	rw-r--r--
📄 tokens.py	1.75 KB	08/06/2019 02:49:50 PM	rw-r--r--

Editing: tokens.py

"""
authlib.openid.connect.core.tokens
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This module contains methods for adding JWT tokens to requests.
"""
from __future__ import absolute_import, unicode_literals

from oauthlib.oauth2.rfc6749.tokens import TokenBase, random_token_generator

class JWTToken(TokenBase):
    __slots__ = (
        'request_validator', 'token_generator',
        'refresh_token_generator', 'expires_in'
    )

def __init__(self, request_validator=None, token_generator=None,
                 expires_in=None, refresh_token_generator=None):
        self.request_validator = request_validator
        self.token_generator = token_generator or random_token_generator
        self.refresh_token_generator = (
            refresh_token_generator or self.token_generator
        )
        self.expires_in = expires_in or 3600

def create_token(self, request, refresh_token=False):
        """Create a JWT Token, using requestvalidator method."""

if callable(self.expires_in):
            expires_in = self.expires_in(request)
        else:
            expires_in = self.expires_in

request.expires_in = expires_in

return self.request_validator.get_jwt_bearer_token(None, None, request)

def validate_request(self, request):
        token = None
        if 'Authorization' in request.headers:
            token = request.headers.get('Authorization')[7:]
        else:
            token = request.access_token
        return self.request_validator.validate_jwt_bearer_token(
            token, request.scopes, request)

def estimate_type(self, request):
        token = request.headers.get('Authorization', '')[7:]
        if token.startswith('ey') and token.count('.') in (2, 4):
            return 10
        else:
            return 0