basedpyright 1.25.0 → 1.26.0

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/errors.pyi

@@ -0,0 +1,92 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2 import OAuth2Error as OAuth2Error
+
+__all__ = [
+    "OAuth2Error",
+    "InsecureTransportError",
+    "InvalidRequestError",
+    "InvalidClientError",
+    "UnauthorizedClientError",
+    "InvalidGrantError",
+    "UnsupportedResponseTypeError",
+    "UnsupportedGrantTypeError",
+    "InvalidScopeError",
+    "AccessDeniedError",
+    "MissingAuthorizationError",
+    "UnsupportedTokenTypeError",
+    "MissingCodeException",
+    "MissingTokenException",
+    "MissingTokenTypeException",
+    "MismatchingStateException",
+]
+
+class InsecureTransportError(OAuth2Error):
+    error: str
+    description: str
+    @classmethod
+    def check(cls, uri) -> None: ...
+
+class InvalidRequestError(OAuth2Error):
+    error: str
+
+class InvalidClientError(OAuth2Error):
+    error: str
+    status_code: int
+    def get_headers(self): ...
+
+class InvalidGrantError(OAuth2Error):
+    error: str
+
+class UnauthorizedClientError(OAuth2Error):
+    error: str
+
+class UnsupportedResponseTypeError(OAuth2Error):
+    error: str
+    response_type: Incomplete
+    def __init__(self, response_type) -> None: ...
+    def get_error_description(self): ...
+
+class UnsupportedGrantTypeError(OAuth2Error):
+    error: str
+    grant_type: Incomplete
+    def __init__(self, grant_type) -> None: ...
+    def get_error_description(self): ...
+
+class InvalidScopeError(OAuth2Error):
+    error: str
+    description: str
+
+class AccessDeniedError(OAuth2Error):
+    error: str
+    description: str
+
+class ForbiddenError(OAuth2Error):
+    status_code: int
+    auth_type: Incomplete
+    realm: Incomplete
+    def __init__(self, auth_type: Incomplete | None = None, realm: Incomplete | None = None) -> None: ...
+    def get_headers(self): ...
+
+class MissingAuthorizationError(ForbiddenError):
+    error: str
+    description: str
+
+class UnsupportedTokenTypeError(ForbiddenError):
+    error: str
+
+class MissingCodeException(OAuth2Error):
+    error: str
+    description: str
+
+class MissingTokenException(OAuth2Error):
+    error: str
+    description: str
+
+class MissingTokenTypeException(OAuth2Error):
+    error: str
+    description: str
+
+class MismatchingStateException(OAuth2Error):
+    error: str
+    description: str

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/grants/__init__.pyi

@@ -0,0 +1,21 @@
+from .authorization_code import AuthorizationCodeGrant as AuthorizationCodeGrant
+from .base import (
+    AuthorizationEndpointMixin as AuthorizationEndpointMixin,
+    BaseGrant as BaseGrant,
+    TokenEndpointMixin as TokenEndpointMixin,
+)
+from .client_credentials import ClientCredentialsGrant as ClientCredentialsGrant
+from .implicit import ImplicitGrant as ImplicitGrant
+from .refresh_token import RefreshTokenGrant as RefreshTokenGrant
+from .resource_owner_password_credentials import ResourceOwnerPasswordCredentialsGrant as ResourceOwnerPasswordCredentialsGrant
+
+__all__ = [
+    "BaseGrant",
+    "AuthorizationEndpointMixin",
+    "TokenEndpointMixin",
+    "AuthorizationCodeGrant",
+    "ImplicitGrant",
+    "ResourceOwnerPasswordCredentialsGrant",
+    "ClientCredentialsGrant",
+    "RefreshTokenGrant",
+]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/grants/authorization_code.pyi

@@ -0,0 +1,24 @@
+from collections.abc import Collection
+from typing_extensions import TypeAlias
+
+from authlib.oauth2 import OAuth2Request
+from authlib.oauth2.rfc6749 import AuthorizationEndpointMixin, BaseGrant, ClientMixin, TokenEndpointMixin
+
+_ServerResponse: TypeAlias = tuple[int, str, list[tuple[str, str]]]
+
+class AuthorizationCodeGrant(BaseGrant, AuthorizationEndpointMixin, TokenEndpointMixin):
+    TOKEN_ENDPOINT_AUTH_METHODS: Collection[str]
+    AUTHORIZATION_CODE_LENGTH: int
+    RESPONSE_TYPES: Collection[str]
+    GRANT_TYPE: str
+    def validate_authorization_request(self) -> str: ...
+    def create_authorization_response(self, redirect_uri: str, grant_user) -> _ServerResponse: ...
+    def validate_token_request(self) -> None: ...
+    def create_token_response(self) -> _ServerResponse: ...
+    def generate_authorization_code(self) -> str: ...
+    def save_authorization_code(self, code: str, request: OAuth2Request) -> None: ...
+    def query_authorization_code(self, code: str, client: ClientMixin): ...
+    def delete_authorization_code(self, authorization_code) -> None: ...
+    def authenticate_user(self, authorization_code): ...
+
+def validate_code_authorization_request(grant: AuthorizationCodeGrant) -> str: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/grants/base.pyi

@@ -0,0 +1,55 @@
+from _typeshed import Incomplete
+from collections.abc import Callable, Collection
+from typing_extensions import TypeAlias
+
+from authlib.oauth2 import OAuth2Request
+from authlib.oauth2.rfc6749 import ClientMixin
+
+_ServerResponse: TypeAlias = tuple[int, str, list[tuple[str, str]]]
+
+class BaseGrant:
+    TOKEN_ENDPOINT_AUTH_METHODS: Collection[str]
+    GRANT_TYPE: str | None
+    TOKEN_RESPONSE_HEADER: Collection[tuple[str, str]]
+    prompt: Incomplete
+    redirect_uri: Incomplete
+    request: OAuth2Request
+    server: Incomplete
+    def __init__(self, request: OAuth2Request, server) -> None: ...
+    @property
+    def client(self): ...
+    def generate_token(
+        self,
+        user: Incomplete | None = None,
+        scope: str | None = None,
+        grant_type: str | None = None,
+        expires_in: int | None = None,
+        include_refresh_token: bool = True,
+    ) -> dict[str, str | int]: ...
+    def authenticate_token_endpoint_client(self) -> ClientMixin: ...
+    def save_token(self, token): ...
+    def validate_requested_scope(self) -> None: ...
+    def register_hook(self, hook_type: str, hook: Callable[..., Incomplete]) -> None: ...
+    def execute_hook(self, hook_type: str, *args: object, **kwargs: object) -> None: ...
+
+class TokenEndpointMixin:
+    TOKEN_ENDPOINT_HTTP_METHODS: Incomplete
+    GRANT_TYPE: Incomplete
+    @classmethod
+    def check_token_endpoint(cls, request: OAuth2Request): ...
+    def validate_token_request(self) -> None: ...
+    def create_token_response(self) -> _ServerResponse: ...
+
+class AuthorizationEndpointMixin:
+    RESPONSE_TYPES: Collection[str]
+    ERROR_RESPONSE_FRAGMENT: bool
+    @classmethod
+    def check_authorization_endpoint(cls, request: OAuth2Request) -> bool: ...
+    @staticmethod
+    def validate_authorization_redirect_uri(request: OAuth2Request, client: ClientMixin) -> str: ...
+    @staticmethod
+    def validate_no_multiple_request_parameter(request: OAuth2Request): ...
+    redirect_uri: Incomplete
+    def validate_consent_request(self) -> None: ...
+    def validate_authorization_request(self) -> str: ...
+    def create_authorization_response(self, redirect_uri: str, grant_user) -> _ServerResponse: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/grants/client_credentials.pyi

@@ -0,0 +1,6 @@
+from authlib.oauth2.rfc6749 import BaseGrant, TokenEndpointMixin
+
+class ClientCredentialsGrant(BaseGrant, TokenEndpointMixin):
+    GRANT_TYPE: str
+    def validate_token_request(self) -> None: ...
+    def create_token_response(self): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/grants/implicit.pyi

@@ -0,0 +1,12 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6749 import AuthorizationEndpointMixin, BaseGrant
+
+class ImplicitGrant(BaseGrant, AuthorizationEndpointMixin):
+    AUTHORIZATION_ENDPOINT: bool
+    TOKEN_ENDPOINT_AUTH_METHODS: Incomplete
+    RESPONSE_TYPES: Incomplete
+    GRANT_TYPE: str
+    ERROR_RESPONSE_FRAGMENT: bool
+    def validate_authorization_request(self): ...
+    def create_authorization_response(self, redirect_uri, grant_user): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/grants/refresh_token.pyi

@@ -0,0 +1,15 @@
+from typing_extensions import TypeAlias
+
+from authlib.oauth2.rfc6749 import BaseGrant, TokenEndpointMixin, TokenMixin
+
+_ServerResponse: TypeAlias = tuple[int, str, list[tuple[str, str]]]
+
+class RefreshTokenGrant(BaseGrant, TokenEndpointMixin):
+    GRANT_TYPE: str
+    INCLUDE_NEW_REFRESH_TOKEN: bool
+    def validate_token_request(self) -> None: ...
+    def create_token_response(self) -> _ServerResponse: ...
+    def issue_token(self, user, refresh_token: TokenMixin) -> dict[str, str | int]: ...
+    def authenticate_refresh_token(self, refresh_token: str) -> TokenMixin: ...
+    def authenticate_user(self, refresh_token): ...
+    def revoke_old_credential(self, refresh_token: TokenMixin) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/grants/resource_owner_password_credentials.pyi

@@ -0,0 +1,7 @@
+from authlib.oauth2.rfc6749 import BaseGrant, TokenEndpointMixin
+
+class ResourceOwnerPasswordCredentialsGrant(BaseGrant, TokenEndpointMixin):
+    GRANT_TYPE: str
+    def validate_token_request(self) -> None: ...
+    def create_token_response(self): ...
+    def authenticate_user(self, username, password) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/models.pyi

@@ -0,0 +1,22 @@
+from collections.abc import Collection
+
+class ClientMixin:
+    def get_client_id(self) -> str: ...
+    def get_default_redirect_uri(self) -> str: ...
+    def get_allowed_scope(self, scope: Collection[str] | str) -> str: ...
+    def check_redirect_uri(self, redirect_uri: str) -> bool: ...
+    def check_client_secret(self, client_secret: str) -> bool: ...
+    def check_endpoint_auth_method(self, method: str, endpoint: str) -> bool: ...
+    def check_response_type(self, response_type: str) -> bool: ...
+    def check_grant_type(self, grant_type: str) -> bool: ...
+
+class AuthorizationCodeMixin:
+    def get_redirect_uri(self) -> str: ...
+    def get_scope(self) -> str: ...
+
+class TokenMixin:
+    def check_client(self, client) -> bool: ...
+    def get_scope(self) -> str: ...
+    def get_expires_in(self) -> int: ...
+    def is_expired(self) -> bool: ...
+    def is_revoked(self) -> bool: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/parameters.pyi

@@ -0,0 +1,14 @@
+from _typeshed import Incomplete
+
+def prepare_grant_uri(
+    uri,
+    client_id,
+    response_type,
+    redirect_uri: Incomplete | None = None,
+    scope: Incomplete | None = None,
+    state: Incomplete | None = None,
+    **kwargs,
+): ...
+def prepare_token_request(grant_type, body: str = "", redirect_uri: Incomplete | None = None, **kwargs): ...
+def parse_authorization_code_response(uri, state: Incomplete | None = None): ...
+def parse_implicit_response(uri, state: Incomplete | None = None): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/requests.pyi

@@ -0,0 +1,48 @@
+from _typeshed import Incomplete
+from collections.abc import Mapping
+
+from authlib.oauth2.rfc6749 import ClientMixin
+
+class OAuth2Request:
+    method: str
+    uri: str
+    body: Mapping[str, str] | None
+    headers: Mapping[str, str] | None
+    client: ClientMixin | None
+    auth_method: str | None
+    user: Incomplete | None
+    authorization_code: Incomplete | None
+    refresh_token: Incomplete | None
+    credential: Incomplete | None
+    def __init__(
+        self, method: str, uri: str, body: Mapping[str, str] | None = None, headers: Mapping[str, str] | None = None
+    ) -> None: ...
+    @property
+    def args(self) -> dict[str, str | None]: ...
+    @property
+    def form(self) -> dict[str, str]: ...
+    @property
+    def data(self) -> dict[str, str]: ...
+    @property
+    def datalist(self) -> dict[str, list[Incomplete]]: ...
+    @property
+    def client_id(self) -> str: ...
+    @property
+    def response_type(self) -> str: ...
+    @property
+    def grant_type(self) -> str: ...
+    @property
+    def redirect_uri(self) -> str: ...
+    @property
+    def scope(self) -> str: ...
+    @property
+    def state(self) -> str | None: ...
+
+class JsonRequest:
+    method: Incomplete
+    uri: Incomplete
+    body: Incomplete
+    headers: Incomplete
+    def __init__(self, method, uri, body: Incomplete | None = None, headers: Incomplete | None = None) -> None: ...
+    @property
+    def data(self): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/resource_protector.pyi

@@ -0,0 +1,19 @@
+from _typeshed import Incomplete
+
+class TokenValidator:
+    TOKEN_TYPE: str
+    realm: Incomplete
+    extra_attributes: Incomplete
+    def __init__(self, realm: Incomplete | None = None, **extra_attributes) -> None: ...
+    @staticmethod
+    def scope_insufficient(token_scopes, required_scopes): ...
+    def authenticate_token(self, token_string) -> None: ...
+    def validate_request(self, request) -> None: ...
+    def validate_token(self, token, scopes, request) -> None: ...
+
+class ResourceProtector:
+    def __init__(self) -> None: ...
+    def register_token_validator(self, validator: TokenValidator): ...
+    def get_token_validator(self, token_type): ...
+    def parse_request_authorization(self, request): ...
+    def validate_request(self, scopes, request, **kwargs): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/token_endpoint.pyi

@@ -0,0 +1,13 @@
+from _typeshed import Incomplete
+
+class TokenEndpoint:
+    ENDPOINT_NAME: Incomplete
+    SUPPORTED_TOKEN_TYPES: Incomplete
+    CLIENT_AUTH_METHODS: Incomplete
+    server: Incomplete
+    def __init__(self, server) -> None: ...
+    def __call__(self, request): ...
+    def create_endpoint_request(self, request): ...
+    def authenticate_endpoint_client(self, request): ...
+    def authenticate_token(self, request, client) -> None: ...
+    def create_endpoint_response(self, request) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/util.pyi

@@ -0,0 +1,5 @@
+from collections.abc import Collection
+
+def list_to_scope(scope: Collection[str] | str | None) -> str: ...
+def scope_to_list(scope: Collection[str] | str | None) -> list[str]: ...
+def extract_basic_authorization(headers: dict[str, str]) -> tuple[str, str]: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6749/wrappers.pyi

@@ -0,0 +1,5 @@
+class OAuth2Token(dict[str, object]):
+    def __init__(self, params) -> None: ...
+    def is_expired(self, leeway: int = 60): ...
+    @classmethod
+    def from_dict(cls, token): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6750/__init__.pyi

@@ -0,0 +1,15 @@
+from .errors import InsufficientScopeError as InsufficientScopeError, InvalidTokenError as InvalidTokenError
+from .parameters import add_bearer_token as add_bearer_token
+from .token import BearerTokenGenerator as BearerTokenGenerator
+from .validator import BearerTokenValidator as BearerTokenValidator
+
+__all__ = [
+    "InvalidTokenError",
+    "InsufficientScopeError",
+    "add_bearer_token",
+    "BearerToken",
+    "BearerTokenGenerator",
+    "BearerTokenValidator",
+]
+
+BearerToken = BearerTokenGenerator

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6750/errors.pyi

@@ -0,0 +1,27 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2 import OAuth2Error
+
+__all__ = ["InvalidTokenError", "InsufficientScopeError"]
+
+class InvalidTokenError(OAuth2Error):
+    error: str
+    description: str
+    status_code: int
+    realm: Incomplete
+    extra_attributes: Incomplete
+    def __init__(
+        self,
+        description: Incomplete | None = None,
+        uri: Incomplete | None = None,
+        status_code: Incomplete | None = None,
+        state: Incomplete | None = None,
+        realm: Incomplete | None = None,
+        **extra_attributes,
+    ) -> None: ...
+    def get_headers(self): ...
+
+class InsufficientScopeError(OAuth2Error):
+    error: str
+    description: str
+    status_code: int

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6750/parameters.pyi

@@ -0,0 +1,6 @@
+from _typeshed import Incomplete
+
+def add_to_uri(token, uri): ...
+def add_to_headers(token, headers: Incomplete | None = None): ...
+def add_to_body(token, body: Incomplete | None = None): ...
+def add_bearer_token(token, uri, headers, body, placement: str = "header"): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6750/token.pyi

@@ -0,0 +1,41 @@
+from _typeshed import Incomplete
+from collections.abc import Callable
+from typing import Protocol
+
+from authlib.oauth2.rfc6749 import ClientMixin
+
+class _TokenGenerator(Protocol):
+    def __call__(self, *, client: ClientMixin, grant_type: str, user, scope: str) -> str: ...
+
+class BearerTokenGenerator:
+    DEFAULT_EXPIRES_IN: int
+    GRANT_TYPES_EXPIRES_IN: dict[str, int]
+    access_token_generator: _TokenGenerator
+    refresh_token_generator: _TokenGenerator
+    expires_generator: Callable[[ClientMixin, str], int]
+    def __init__(
+        self,
+        access_token_generator: _TokenGenerator,
+        refresh_token_generator: _TokenGenerator | None = None,
+        expires_generator: Callable[[ClientMixin, str], int] | None = None,
+    ) -> None: ...
+    @staticmethod
+    def get_allowed_scope(client: ClientMixin, scope: str) -> str: ...
+    def generate(
+        self,
+        grant_type: str,
+        client: ClientMixin,
+        user: Incomplete | None = None,
+        scope: str | None = None,
+        expires_in: int | None = None,
+        include_refresh_token: bool = True,
+    ) -> dict[str, str | int]: ...
+    def __call__(
+        self,
+        grant_type: str,
+        client: ClientMixin,
+        user: Incomplete | None = None,
+        scope: str | None = None,
+        expires_in: int | None = None,
+        include_refresh_token: bool = True,
+    ) -> dict[str, str | int]: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc6750/validator.pyi

@@ -0,0 +1,6 @@
+from authlib.oauth2.rfc6749 import TokenValidator
+
+class BearerTokenValidator(TokenValidator):
+    TOKEN_TYPE: str
+    def authenticate_token(self, token_string) -> None: ...
+    def validate_token(self, token, scopes, request) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7009/__init__.pyi

@@ -0,0 +1,4 @@
+from .parameters import prepare_revoke_token_request as prepare_revoke_token_request
+from .revocation import RevocationEndpoint as RevocationEndpoint
+
+__all__ = ["prepare_revoke_token_request", "RevocationEndpoint"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7009/parameters.pyi

@@ -0,0 +1,5 @@
+from _typeshed import Incomplete
+
+def prepare_revoke_token_request(
+    token, token_type_hint: Incomplete | None = None, body: Incomplete | None = None, headers: Incomplete | None = None
+): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7009/revocation.pyi

@@ -0,0 +1,9 @@
+from authlib.oauth2.rfc6749 import TokenEndpoint
+
+class RevocationEndpoint(TokenEndpoint):
+    ENDPOINT_NAME: str
+    def authenticate_token(self, request, client): ...
+    def check_params(self, request, client) -> None: ...
+    def create_endpoint_response(self, request): ...
+    def query_token(self, token_string, token_type_hint) -> None: ...
+    def revoke_token(self, token, request) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7521/__init__.pyi

@@ -0,0 +1,3 @@
+from .client import AssertionClient as AssertionClient
+
+__all__ = ["AssertionClient"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7521/client.pyi

@@ -0,0 +1,39 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2 import OAuth2Error
+
+class AssertionClient:
+    DEFAULT_GRANT_TYPE: Incomplete
+    ASSERTION_METHODS: Incomplete
+    token_auth_class: Incomplete
+    oauth_error_class = OAuth2Error
+    session: Incomplete
+    token_endpoint: Incomplete
+    grant_type: Incomplete
+    issuer: Incomplete
+    subject: Incomplete
+    audience: Incomplete
+    claims: Incomplete
+    scope: Incomplete
+    token_auth: Incomplete
+    leeway: Incomplete
+    def __init__(
+        self,
+        session,
+        token_endpoint,
+        issuer,
+        subject,
+        audience: Incomplete | None = None,
+        grant_type: Incomplete | None = None,
+        claims: Incomplete | None = None,
+        token_placement: str = "header",
+        scope: Incomplete | None = None,
+        leeway: int = 60,
+        **kwargs,
+    ) -> None: ...
+    @property
+    def token(self): ...
+    @token.setter
+    def token(self, token) -> None: ...
+    def refresh_token(self): ...
+    def parse_response_token(self, resp): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7523/__init__.pyi

@@ -0,0 +1,18 @@
+from .assertion import client_secret_jwt_sign as client_secret_jwt_sign, private_key_jwt_sign as private_key_jwt_sign
+from .auth import ClientSecretJWT as ClientSecretJWT, PrivateKeyJWT as PrivateKeyJWT
+from .client import JWTBearerClientAssertion as JWTBearerClientAssertion
+from .jwt_bearer import JWTBearerGrant as JWTBearerGrant
+from .token import JWTBearerTokenGenerator as JWTBearerTokenGenerator
+from .validator import JWTBearerToken as JWTBearerToken, JWTBearerTokenValidator as JWTBearerTokenValidator
+
+__all__ = [
+    "JWTBearerGrant",
+    "JWTBearerClientAssertion",
+    "client_secret_jwt_sign",
+    "private_key_jwt_sign",
+    "ClientSecretJWT",
+    "PrivateKeyJWT",
+    "JWTBearerToken",
+    "JWTBearerTokenGenerator",
+    "JWTBearerTokenValidator",
+]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7523/assertion.pyi

@@ -0,0 +1,19 @@
+from _typeshed import Incomplete
+
+def sign_jwt_bearer_assertion(
+    key,
+    issuer,
+    audience,
+    subject: Incomplete | None = None,
+    issued_at: Incomplete | None = None,
+    expires_at: Incomplete | None = None,
+    claims: Incomplete | None = None,
+    header: Incomplete | None = None,
+    **kwargs,
+): ...
+def client_secret_jwt_sign(
+    client_secret, client_id, token_endpoint, alg: str = "HS256", claims: Incomplete | None = None, **kwargs
+): ...
+def private_key_jwt_sign(
+    private_key, client_id, token_endpoint, alg: str = "RS256", claims: Incomplete | None = None, **kwargs
+): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7523/auth.pyi

@@ -0,0 +1,22 @@
+from _typeshed import Incomplete
+
+class ClientSecretJWT:
+    name: str
+    alg: str
+    token_endpoint: Incomplete
+    claims: Incomplete
+    headers: Incomplete
+    def __init__(
+        self,
+        token_endpoint: Incomplete | None = None,
+        claims: Incomplete | None = None,
+        headers: Incomplete | None = None,
+        alg: Incomplete | None = None,
+    ) -> None: ...
+    def sign(self, auth, token_endpoint): ...
+    def __call__(self, auth, method, uri, headers, body): ...
+
+class PrivateKeyJWT(ClientSecretJWT):
+    name: str
+    alg: str
+    def sign(self, auth, token_endpoint): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7523/client.pyi

@@ -0,0 +1,16 @@
+from _typeshed import Incomplete
+
+ASSERTION_TYPE: str
+
+class JWTBearerClientAssertion:
+    CLIENT_ASSERTION_TYPE = ASSERTION_TYPE
+    CLIENT_AUTH_METHOD: str
+    token_url: Incomplete
+    def __init__(self, token_url, validate_jti: bool = True) -> None: ...
+    def __call__(self, query_client, request): ...
+    def create_claims_options(self): ...
+    def process_assertion_claims(self, assertion, resolve_key): ...
+    def authenticate_client(self, client): ...
+    def create_resolve_key_func(self, query_client, request): ...
+    def validate_jti(self, claims, jti) -> None: ...
+    def resolve_client_public_key(self, client, headers) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7523/jwt_bearer.pyi

@@ -0,0 +1,28 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6749 import BaseGrant, TokenEndpointMixin
+
+JWT_BEARER_GRANT_TYPE: str
+
+class JWTBearerGrant(BaseGrant, TokenEndpointMixin):
+    GRANT_TYPE = JWT_BEARER_GRANT_TYPE
+    CLAIMS_OPTIONS: Incomplete
+    @staticmethod
+    def sign(
+        key,
+        issuer,
+        audience,
+        subject: Incomplete | None = None,
+        issued_at: Incomplete | None = None,
+        expires_at: Incomplete | None = None,
+        claims: Incomplete | None = None,
+        **kwargs,
+    ): ...
+    def process_assertion_claims(self, assertion): ...
+    def resolve_public_key(self, headers, payload): ...
+    def validate_token_request(self) -> None: ...
+    def create_token_response(self): ...
+    def resolve_issuer_client(self, issuer) -> None: ...
+    def resolve_client_key(self, client, headers, payload) -> None: ...
+    def authenticate_user(self, subject) -> None: ...
+    def has_granted_permission(self, client, user) -> None: ...