basedpyright 1.25.0 → 1.26.0

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7523/token.pyi

@@ -0,0 +1,30 @@
+from _typeshed import Incomplete
+
+class JWTBearerTokenGenerator:
+    DEFAULT_EXPIRES_IN: int
+    secret_key: Incomplete
+    issuer: Incomplete
+    alg: Incomplete
+    def __init__(self, secret_key, issuer: Incomplete | None = None, alg: str = "RS256") -> None: ...
+    @staticmethod
+    def get_allowed_scope(client, scope): ...
+    @staticmethod
+    def get_sub_value(user): ...
+    def get_token_data(self, grant_type, client, expires_in, user: Incomplete | None = None, scope: Incomplete | None = None): ...
+    def generate(
+        self,
+        grant_type,
+        client,
+        user: Incomplete | None = None,
+        scope: Incomplete | None = None,
+        expires_in: Incomplete | None = None,
+    ): ...
+    def __call__(
+        self,
+        grant_type,
+        client,
+        user: Incomplete | None = None,
+        scope: Incomplete | None = None,
+        expires_in: Incomplete | None = None,
+        include_refresh_token: bool = True,
+    ): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7523/validator.pyi

@@ -0,0 +1,24 @@
+from _typeshed import Incomplete
+
+from authlib.jose import JWTClaims
+from authlib.oauth2.rfc6749 import TokenMixin
+from authlib.oauth2.rfc6750 import BearerTokenValidator
+
+logger: Incomplete
+
+class JWTBearerToken(TokenMixin, JWTClaims):
+    def check_client(self, client): ...
+    def get_scope(self): ...
+    def get_expires_in(self): ...
+    def is_expired(self): ...
+    def is_revoked(self): ...
+
+class JWTBearerTokenValidator(BearerTokenValidator):
+    TOKEN_TYPE: str
+    token_cls = JWTBearerToken
+    public_key: Incomplete
+    claims_options: Incomplete
+    def __init__(
+        self, public_key, issuer: Incomplete | None = None, realm: Incomplete | None = None, **extra_attributes
+    ) -> None: ...
+    def authenticate_token(self, token_string): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7591/__init__.pyi

@@ -0,0 +1,17 @@
+from .claims import ClientMetadataClaims as ClientMetadataClaims
+from .endpoint import ClientRegistrationEndpoint as ClientRegistrationEndpoint
+from .errors import (
+    InvalidClientMetadataError as InvalidClientMetadataError,
+    InvalidRedirectURIError as InvalidRedirectURIError,
+    InvalidSoftwareStatementError as InvalidSoftwareStatementError,
+    UnapprovedSoftwareStatementError as UnapprovedSoftwareStatementError,
+)
+
+__all__ = [
+    "ClientMetadataClaims",
+    "ClientRegistrationEndpoint",
+    "InvalidRedirectURIError",
+    "InvalidClientMetadataError",
+    "InvalidSoftwareStatementError",
+    "UnapprovedSoftwareStatementError",
+]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7591/claims.pyi

@@ -0,0 +1,22 @@
+from _typeshed import Incomplete
+
+from authlib.jose import BaseClaims
+
+class ClientMetadataClaims(BaseClaims):
+    REGISTERED_CLAIMS: Incomplete
+    def validate(self) -> None: ...
+    def validate_redirect_uris(self) -> None: ...
+    def validate_token_endpoint_auth_method(self) -> None: ...
+    def validate_grant_types(self) -> None: ...
+    def validate_response_types(self) -> None: ...
+    def validate_client_name(self) -> None: ...
+    def validate_client_uri(self) -> None: ...
+    def validate_logo_uri(self) -> None: ...
+    def validate_scope(self) -> None: ...
+    def validate_contacts(self) -> None: ...
+    def validate_tos_uri(self) -> None: ...
+    def validate_policy_uri(self) -> None: ...
+    def validate_jwks_uri(self) -> None: ...
+    def validate_jwks(self) -> None: ...
+    def validate_software_id(self) -> None: ...
+    def validate_software_version(self) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7591/endpoint.pyi

@@ -0,0 +1,24 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc7591 import ClientMetadataClaims
+
+class ClientRegistrationEndpoint:
+    ENDPOINT_NAME: str
+    claims_class = ClientMetadataClaims
+    software_statement_alg_values_supported: Incomplete
+    server: Incomplete
+    def __init__(self, server) -> None: ...
+    def __call__(self, request): ...
+    def create_registration_response(self, request): ...
+    def extract_client_metadata(self, request): ...
+    def extract_software_statement(self, software_statement, request): ...
+    def get_claims_options(self): ...
+    def generate_client_info(self): ...
+    def generate_client_registration_info(self, client, request) -> None: ...
+    def create_endpoint_request(self, request): ...
+    def generate_client_id(self): ...
+    def generate_client_secret(self): ...
+    def get_server_metadata(self) -> None: ...
+    def authenticate_token(self, request) -> None: ...
+    def resolve_public_key(self, request) -> None: ...
+    def save_client(self, client_info, client_metadata, request) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7591/errors.pyi

@@ -0,0 +1,13 @@
+from authlib.oauth2 import OAuth2Error
+
+class InvalidRedirectURIError(OAuth2Error):
+    error: str
+
+class InvalidClientMetadataError(OAuth2Error):
+    error: str
+
+class InvalidSoftwareStatementError(OAuth2Error):
+    error: str
+
+class UnapprovedSoftwareStatementError(OAuth2Error):
+    error: str

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7592/__init__.pyi

@@ -0,0 +1,3 @@
+from .endpoint import ClientConfigurationEndpoint as ClientConfigurationEndpoint
+
+__all__ = ["ClientConfigurationEndpoint"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7592/endpoint.pyi

@@ -0,0 +1,26 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc7591 import ClientMetadataClaims
+
+class ClientConfigurationEndpoint:
+    ENDPOINT_NAME: str
+    claims_class = ClientMetadataClaims
+    server: Incomplete
+    def __init__(self, server) -> None: ...
+    def __call__(self, request): ...
+    def create_configuration_response(self, request): ...
+    def create_endpoint_request(self, request): ...
+    def create_read_client_response(self, client, request): ...
+    def create_delete_client_response(self, client, request): ...
+    def create_update_client_response(self, client, request): ...
+    def extract_client_metadata(self, request): ...
+    def get_claims_options(self): ...
+    def introspect_client(self, client): ...
+    def generate_client_registration_info(self, client, request) -> None: ...
+    def authenticate_token(self, request) -> None: ...
+    def authenticate_client(self, request) -> None: ...
+    def revoke_access_token(self, token, request) -> None: ...
+    def check_permission(self, client, request) -> None: ...
+    def delete_client(self, client, request) -> None: ...
+    def update_client(self, client, client_metadata, request) -> None: ...
+    def get_server_metadata(self) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7636/__init__.pyi

@@ -0,0 +1,3 @@
+from .challenge import CodeChallenge as CodeChallenge, create_s256_code_challenge as create_s256_code_challenge
+
+__all__ = ["CodeChallenge", "create_s256_code_challenge"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7636/challenge.pyi

@@ -0,0 +1,20 @@
+from _typeshed import Incomplete
+
+CODE_VERIFIER_PATTERN: Incomplete
+CODE_CHALLENGE_PATTERN: Incomplete
+
+def create_s256_code_challenge(code_verifier): ...
+def compare_plain_code_challenge(code_verifier, code_challenge): ...
+def compare_s256_code_challenge(code_verifier, code_challenge): ...
+
+class CodeChallenge:
+    DEFAULT_CODE_CHALLENGE_METHOD: str
+    SUPPORTED_CODE_CHALLENGE_METHOD: Incomplete
+    CODE_CHALLENGE_METHODS: Incomplete
+    required: Incomplete
+    def __init__(self, required: bool = True) -> None: ...
+    def __call__(self, grant) -> None: ...
+    def validate_code_challenge(self, grant) -> None: ...
+    def validate_code_verifier(self, grant) -> None: ...
+    def get_authorization_code_challenge(self, authorization_code): ...
+    def get_authorization_code_challenge_method(self, authorization_code): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7662/__init__.pyi

@@ -0,0 +1,5 @@
+from .introspection import IntrospectionEndpoint as IntrospectionEndpoint
+from .models import IntrospectionToken as IntrospectionToken
+from .token_validator import IntrospectTokenValidator as IntrospectTokenValidator
+
+__all__ = ["IntrospectionEndpoint", "IntrospectionToken", "IntrospectTokenValidator"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7662/introspection.pyi

@@ -0,0 +1,11 @@
+from authlib.oauth2.rfc6749 import TokenEndpoint
+
+class IntrospectionEndpoint(TokenEndpoint):
+    ENDPOINT_NAME: str
+    def authenticate_token(self, request, client): ...
+    def check_params(self, request, client) -> None: ...
+    def create_endpoint_response(self, request): ...
+    def create_introspection_payload(self, token): ...
+    def check_permission(self, token, client, request) -> None: ...
+    def query_token(self, token_string, token_type_hint) -> None: ...
+    def introspect_token(self, token) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7662/models.pyi

@@ -0,0 +1,8 @@
+from authlib.oauth2.rfc6749 import TokenMixin
+
+class IntrospectionToken(dict[str, object], TokenMixin):
+    def get_client_id(self): ...
+    def get_scope(self): ...
+    def get_expires_in(self): ...
+    def get_expires_at(self): ...
+    def __getattr__(self, key): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc7662/token_validator.pyi

@@ -0,0 +1,7 @@
+from authlib.oauth2.rfc6749 import TokenValidator
+
+class IntrospectTokenValidator(TokenValidator):
+    TOKEN_TYPE: str
+    def introspect_token(self, token_string) -> None: ...
+    def authenticate_token(self, token_string): ...
+    def validate_token(self, token, scopes, request) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8414/__init__.pyi

@@ -0,0 +1,4 @@
+from .models import AuthorizationServerMetadata as AuthorizationServerMetadata
+from .well_known import get_well_known_url as get_well_known_url
+
+__all__ = ["AuthorizationServerMetadata", "get_well_known_url"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8414/models.pyi

@@ -0,0 +1,40 @@
+from _typeshed import Incomplete
+
+class AuthorizationServerMetadata(dict[str, object]):
+    REGISTRY_KEYS: Incomplete
+    def validate_issuer(self) -> None: ...
+    def validate_authorization_endpoint(self) -> None: ...
+    def validate_token_endpoint(self) -> None: ...
+    def validate_jwks_uri(self) -> None: ...
+    def validate_registration_endpoint(self) -> None: ...
+    def validate_scopes_supported(self) -> None: ...
+    def validate_response_types_supported(self) -> None: ...
+    def validate_response_modes_supported(self) -> None: ...
+    def validate_grant_types_supported(self) -> None: ...
+    def validate_token_endpoint_auth_methods_supported(self) -> None: ...
+    def validate_token_endpoint_auth_signing_alg_values_supported(self) -> None: ...
+    def validate_service_documentation(self) -> None: ...
+    def validate_ui_locales_supported(self) -> None: ...
+    def validate_op_policy_uri(self) -> None: ...
+    def validate_op_tos_uri(self) -> None: ...
+    def validate_revocation_endpoint(self) -> None: ...
+    def validate_revocation_endpoint_auth_methods_supported(self) -> None: ...
+    def validate_revocation_endpoint_auth_signing_alg_values_supported(self) -> None: ...
+    def validate_introspection_endpoint(self) -> None: ...
+    def validate_introspection_endpoint_auth_methods_supported(self) -> None: ...
+    def validate_introspection_endpoint_auth_signing_alg_values_supported(self) -> None: ...
+    def validate_code_challenge_methods_supported(self) -> None: ...
+    @property
+    def response_modes_supported(self): ...
+    @property
+    def grant_types_supported(self): ...
+    @property
+    def token_endpoint_auth_methods_supported(self): ...
+    @property
+    def revocation_endpoint_auth_methods_supported(self): ...
+    @property
+    def introspection_endpoint_auth_methods_supported(self): ...
+    def validate(self) -> None: ...
+    def __getattr__(self, key): ...
+
+def validate_array_value(metadata, key) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8414/well_known.pyi

@@ -0,0 +1 @@
+def get_well_known_url(issuer, external: bool = False, suffix: str = "oauth-authorization-server"): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8628/__init__.pyi

@@ -0,0 +1,19 @@
+from .device_code import DEVICE_CODE_GRANT_TYPE as DEVICE_CODE_GRANT_TYPE, DeviceCodeGrant as DeviceCodeGrant
+from .endpoint import DeviceAuthorizationEndpoint as DeviceAuthorizationEndpoint
+from .errors import (
+    AuthorizationPendingError as AuthorizationPendingError,
+    ExpiredTokenError as ExpiredTokenError,
+    SlowDownError as SlowDownError,
+)
+from .models import DeviceCredentialDict as DeviceCredentialDict, DeviceCredentialMixin as DeviceCredentialMixin
+
+__all__ = [
+    "DeviceAuthorizationEndpoint",
+    "DeviceCodeGrant",
+    "DEVICE_CODE_GRANT_TYPE",
+    "DeviceCredentialMixin",
+    "DeviceCredentialDict",
+    "AuthorizationPendingError",
+    "SlowDownError",
+    "ExpiredTokenError",
+]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8628/device_code.pyi

@@ -0,0 +1,15 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6749 import BaseGrant, TokenEndpointMixin
+
+DEVICE_CODE_GRANT_TYPE: str
+
+class DeviceCodeGrant(BaseGrant, TokenEndpointMixin):
+    GRANT_TYPE = DEVICE_CODE_GRANT_TYPE
+    TOKEN_ENDPOINT_AUTH_METHODS: Incomplete
+    def validate_token_request(self) -> None: ...
+    def create_token_response(self): ...
+    def validate_device_credential(self, credential): ...
+    def query_device_credential(self, device_code) -> None: ...
+    def query_user_grant(self, user_code) -> None: ...
+    def should_slow_down(self, credential) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8628/endpoint.pyi

@@ -0,0 +1,21 @@
+from _typeshed import Incomplete
+
+class DeviceAuthorizationEndpoint:
+    ENDPOINT_NAME: str
+    CLIENT_AUTH_METHODS: Incomplete
+    USER_CODE_TYPE: str
+    EXPIRES_IN: int
+    INTERVAL: int
+    server: Incomplete
+    def __init__(self, server) -> None: ...
+    def __call__(self, request): ...
+    def create_endpoint_request(self, request): ...
+    def authenticate_client(self, request): ...
+    def create_endpoint_response(self, request): ...
+    def generate_user_code(self): ...
+    def generate_device_code(self): ...
+    def get_verification_uri(self) -> None: ...
+    def save_device_credential(self, client_id, scope, data) -> None: ...
+
+def create_string_user_code(): ...
+def create_digital_user_code(): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8628/errors.pyi

@@ -0,0 +1,10 @@
+from authlib.oauth2 import OAuth2Error
+
+class AuthorizationPendingError(OAuth2Error):
+    error: str
+
+class SlowDownError(OAuth2Error):
+    error: str
+
+class ExpiredTokenError(OAuth2Error):
+    error: str

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc8628/models.pyi

@@ -0,0 +1,13 @@
+class DeviceCredentialMixin:
+    def get_client_id(self) -> None: ...
+    def get_scope(self) -> None: ...
+    def get_user_code(self) -> None: ...
+    def is_expired(self) -> None: ...
+
+class DeviceCredentialDict(dict[str, object], DeviceCredentialMixin):
+    def get_client_id(self): ...
+    def get_scope(self): ...
+    def get_user_code(self): ...
+    def get_nonce(self): ...
+    def get_auth_time(self): ...
+    def is_expired(self): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc9068/__init__.pyi

@@ -0,0 +1,6 @@
+from .introspection import JWTIntrospectionEndpoint as JWTIntrospectionEndpoint
+from .revocation import JWTRevocationEndpoint as JWTRevocationEndpoint
+from .token import JWTBearerTokenGenerator as JWTBearerTokenGenerator
+from .token_validator import JWTBearerTokenValidator as JWTBearerTokenValidator
+
+__all__ = ["JWTBearerTokenGenerator", "JWTBearerTokenValidator", "JWTIntrospectionEndpoint", "JWTRevocationEndpoint"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc9068/claims.pyi

@@ -0,0 +1,16 @@
+from _typeshed import Incomplete
+
+from authlib.jose import JWTClaims
+
+class JWTAccessTokenClaims(JWTClaims):
+    REGISTERED_CLAIMS: Incomplete
+    def validate(self, now: Incomplete | None = None, leeway: int = 0, **kwargs) -> None: ...
+    def validate_typ(self) -> None: ...
+    def validate_client_id(self): ...
+    def validate_auth_time(self) -> None: ...
+    def validate_acr(self): ...
+    def validate_amr(self) -> None: ...
+    def validate_scope(self): ...
+    def validate_groups(self): ...
+    def validate_roles(self): ...
+    def validate_entitlements(self): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc9068/introspection.pyi

@@ -0,0 +1,13 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc7662 import IntrospectionEndpoint
+
+class JWTIntrospectionEndpoint(IntrospectionEndpoint):
+    ENDPOINT_NAME: str
+    issuer: Incomplete
+    def __init__(self, issuer, server: Incomplete | None = None, *args, **kwargs) -> None: ...
+    def create_endpoint_response(self, request): ...
+    def authenticate_token(self, request, client): ...
+    def create_introspection_payload(self, token): ...
+    def get_jwks(self) -> None: ...
+    def get_username(self, user_id: str) -> str: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc9068/revocation.pyi

@@ -0,0 +1,9 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc7009 import RevocationEndpoint
+
+class JWTRevocationEndpoint(RevocationEndpoint):
+    issuer: Incomplete
+    def __init__(self, issuer, server: Incomplete | None = None, *args, **kwargs) -> None: ...
+    def authenticate_token(self, request, client) -> None: ...
+    def get_jwks(self) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc9068/token.pyi

@@ -0,0 +1,23 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6750 import BearerTokenGenerator
+
+class JWTBearerTokenGenerator(BearerTokenGenerator):
+    issuer: Incomplete
+    alg: Incomplete
+    def __init__(
+        self,
+        issuer,
+        alg: str = "RS256",
+        refresh_token_generator: Incomplete | None = None,
+        expires_generator: Incomplete | None = None,
+    ) -> None: ...
+    def get_jwks(self) -> None: ...
+    def get_extra_claims(self, client, grant_type, user, scope): ...
+    def get_audiences(self, client, user, scope) -> str | list[str]: ...
+    def get_acr(self, user) -> str | None: ...
+    def get_auth_time(self, user) -> int | None: ...
+    def get_amr(self, user) -> list[str] | None: ...
+    def get_jti(self, client, grant_type, user, scope) -> str: ...
+    # Override seems safe, but mypy doesn't like that it's a callabe protocol in the base
+    def access_token_generator(self, client, grant_type, user, scope): ...  # type: ignore[override]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oauth2/rfc9068/token_validator.pyi

@@ -0,0 +1,20 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6750 import BearerTokenValidator
+
+class JWTBearerTokenValidator(BearerTokenValidator):
+    issuer: Incomplete
+    resource_server: Incomplete
+    def __init__(self, issuer, resource_server, *args, **kwargs) -> None: ...
+    def get_jwks(self) -> None: ...
+    def validate_iss(self, claims, iss: str) -> bool: ...
+    def authenticate_token(self, token_string): ...
+    def validate_token(
+        self,
+        token,
+        scopes,
+        request,
+        groups: Incomplete | None = None,
+        roles: Incomplete | None = None,
+        entitlements: Incomplete | None = None,
+    ) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/__init__.pyi

@@ -0,0 +1,29 @@
+from .claims import (
+    CodeIDToken as CodeIDToken,
+    HybridIDToken as HybridIDToken,
+    IDToken as IDToken,
+    ImplicitIDToken as ImplicitIDToken,
+    UserInfo as UserInfo,
+    get_claim_cls_by_response_type as get_claim_cls_by_response_type,
+)
+from .grants import (
+    OpenIDCode as OpenIDCode,
+    OpenIDHybridGrant as OpenIDHybridGrant,
+    OpenIDImplicitGrant as OpenIDImplicitGrant,
+    OpenIDToken as OpenIDToken,
+)
+from .models import AuthorizationCodeMixin as AuthorizationCodeMixin
+
+__all__ = [
+    "AuthorizationCodeMixin",
+    "IDToken",
+    "CodeIDToken",
+    "ImplicitIDToken",
+    "HybridIDToken",
+    "UserInfo",
+    "get_claim_cls_by_response_type",
+    "OpenIDToken",
+    "OpenIDCode",
+    "OpenIDHybridGrant",
+    "OpenIDImplicitGrant",
+]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/claims.pyi

@@ -0,0 +1,37 @@
+from _typeshed import Incomplete
+
+from authlib.jose import JWTClaims
+
+__all__ = ["IDToken", "CodeIDToken", "ImplicitIDToken", "HybridIDToken", "UserInfo", "get_claim_cls_by_response_type"]
+
+class IDToken(JWTClaims):
+    ESSENTIAL_CLAIMS: Incomplete
+    def validate(self, now: Incomplete | None = None, leeway: int = 0) -> None: ...
+    def validate_auth_time(self) -> None: ...
+    def validate_nonce(self) -> None: ...
+    def validate_acr(self): ...
+    def validate_amr(self) -> None: ...
+    def validate_azp(self) -> None: ...
+    def validate_at_hash(self) -> None: ...
+
+class CodeIDToken(IDToken):
+    RESPONSE_TYPES: Incomplete
+    REGISTERED_CLAIMS: Incomplete
+
+class ImplicitIDToken(IDToken):
+    RESPONSE_TYPES: Incomplete
+    ESSENTIAL_CLAIMS: Incomplete
+    REGISTERED_CLAIMS: Incomplete
+    def validate_at_hash(self) -> None: ...
+
+class HybridIDToken(ImplicitIDToken):
+    RESPONSE_TYPES: Incomplete
+    REGISTERED_CLAIMS: Incomplete
+    def validate(self, now: Incomplete | None = None, leeway: int = 0) -> None: ...
+    def validate_c_hash(self) -> None: ...
+
+class UserInfo(dict[str, object]):
+    REGISTERED_CLAIMS: Incomplete
+    def __getattr__(self, key): ...
+
+def get_claim_cls_by_response_type(response_type): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/errors.pyi

@@ -0,0 +1,28 @@
+from authlib.oauth2 import OAuth2Error
+
+class InteractionRequiredError(OAuth2Error):
+    error: str
+
+class LoginRequiredError(OAuth2Error):
+    error: str
+
+class AccountSelectionRequiredError(OAuth2Error):
+    error: str
+
+class ConsentRequiredError(OAuth2Error):
+    error: str
+
+class InvalidRequestURIError(OAuth2Error):
+    error: str
+
+class InvalidRequestObjectError(OAuth2Error):
+    error: str
+
+class RequestNotSupportedError(OAuth2Error):
+    error: str
+
+class RequestURINotSupportedError(OAuth2Error):
+    error: str
+
+class RegistrationNotSupportedError(OAuth2Error):
+    error: str

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/grants/__init__.pyi

@@ -0,0 +1,5 @@
+from .code import OpenIDCode as OpenIDCode, OpenIDToken as OpenIDToken
+from .hybrid import OpenIDHybridGrant as OpenIDHybridGrant
+from .implicit import OpenIDImplicitGrant as OpenIDImplicitGrant
+
+__all__ = ["OpenIDToken", "OpenIDCode", "OpenIDImplicitGrant", "OpenIDHybridGrant"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/grants/code.pyi

@@ -0,0 +1,17 @@
+from authlib.oauth2 import OAuth2Request
+from authlib.oauth2.rfc6749 import BaseGrant
+from authlib.oidc.core import UserInfo
+
+class OpenIDToken:
+    def get_jwt_config(self, grant: BaseGrant) -> dict[str, str | int]: ...
+    def generate_user_info(self, user, scope: str) -> UserInfo: ...
+    def get_audiences(self, request: OAuth2Request) -> list[str]: ...
+    def process_token(self, grant: BaseGrant, token: dict[str, str | int]) -> dict[str, str | int]: ...
+    def __call__(self, grant: BaseGrant) -> None: ...
+
+class OpenIDCode(OpenIDToken):
+    require_nonce: bool
+    def __init__(self, require_nonce: bool = False) -> None: ...
+    def exists_nonce(self, nonce: str, request: OAuth2Request) -> bool: ...
+    def validate_openid_authorization_request(self, grant: BaseGrant) -> None: ...
+    def __call__(self, grant: BaseGrant) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/grants/hybrid.pyi

@@ -0,0 +1,13 @@
+from _typeshed import Incomplete
+
+from authlib.oidc.core import OpenIDImplicitGrant
+
+class OpenIDHybridGrant(OpenIDImplicitGrant):
+    AUTHORIZATION_CODE_LENGTH: int
+    RESPONSE_TYPES: Incomplete
+    GRANT_TYPE: str
+    DEFAULT_RESPONSE_MODE: str
+    def generate_authorization_code(self): ...
+    def save_authorization_code(self, code, request) -> None: ...
+    def validate_authorization_request(self): ...
+    def create_granted_params(self, grant_user): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/grants/implicit.pyi

@@ -0,0 +1,16 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6749 import ImplicitGrant
+
+class OpenIDImplicitGrant(ImplicitGrant):
+    RESPONSE_TYPES: Incomplete
+    DEFAULT_RESPONSE_MODE: str
+    def exists_nonce(self, nonce, request) -> None: ...
+    def get_jwt_config(self) -> None: ...
+    def generate_user_info(self, user, scope) -> None: ...
+    def get_audiences(self, request): ...
+    def validate_authorization_request(self): ...
+    def validate_consent_request(self) -> None: ...
+    def create_authorization_response(self, redirect_uri, grant_user): ...
+    def create_granted_params(self, grant_user): ...
+    def process_implicit_token(self, token, code: Incomplete | None = None): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/oidc/core/grants/util.pyi

@@ -0,0 +1,18 @@
+from authlib.oidc.core import UserInfo
+
+def is_openid_scope(scope: str | None) -> bool: ...
+def validate_request_prompt(grant, redirect_uri, redirect_fragment: bool = False): ...
+def validate_nonce(request, exists_nonce, required: bool = False): ...
+def generate_id_token(
+    token: dict[str, str | int],
+    user_info: UserInfo,
+    key: str,
+    iss: str,
+    aud: list[str],
+    alg: str = "RS256",
+    exp: int = 3600,
+    nonce: str | None = None,
+    auth_time: int | None = None,
+    code: str | None = None,
+) -> str: ...
+def create_response_mode_response(redirect_uri, params, response_mode): ...