basedpyright 1.36.2 → 1.37.0-961d59bacff1958014fe4e9ed2ef3116fe2266e2

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/httpx_client/oauth2_client.pyi

@@ -0,0 +1,72 @@
+from _typeshed import Incomplete
+from collections.abc import Generator
+from typing import NoReturn
+from typing_extensions import TypeAlias
+
+from authlib.oauth2.auth import ClientAuth, TokenAuth
+from authlib.oauth2.client import OAuth2Client as _OAuth2Client
+
+from ..base_client import OAuthError
+
+__all__ = ["OAuth2Auth", "OAuth2ClientAuth", "AsyncOAuth2Client", "OAuth2Client"]
+
+_Response: TypeAlias = Incomplete  # actual type is httpx.Response
+_Request: TypeAlias = Incomplete  # actual type is httpx.Request
+
+# Inherits from httpx.Auth
+class OAuth2Auth(TokenAuth):
+    requires_request_body: bool
+    def auth_flow(self, request: _Request) -> Generator[_Request, _Response, None]: ...
+
+# Inherits from httpx.Auth
+class OAuth2ClientAuth(ClientAuth):
+    requires_request_body: bool
+    def auth_flow(self, request: _Request) -> Generator[_Request, _Response, None]: ...
+
+# Inherits from httpx.AsyncClient
+class AsyncOAuth2Client(_OAuth2Client):
+    SESSION_REQUEST_PARAMS: list[str]
+    client_auth_class = OAuth2ClientAuth
+    token_auth_class = OAuth2Auth
+    oauth_error_class = OAuthError  # type: ignore[assignment]
+    def __init__(
+        self,
+        client_id=None,
+        client_secret=None,
+        token_endpoint_auth_method=None,
+        revocation_endpoint_auth_method=None,
+        scope=None,
+        redirect_uri=None,
+        token=None,
+        token_placement="header",
+        update_token=None,
+        leeway=60,
+        **kwargs,
+    ) -> None: ...
+    async def request(self, method, url, withhold_token: bool = False, auth=..., **kwargs): ...
+    async def stream(self, method, url, withhold_token: bool = False, auth=..., **kwargs) -> Generator[Incomplete]: ...
+    async def ensure_active_token(self, token): ...  # type: ignore[override]
+
+# Inherits from httpx.Client
+class OAuth2Client(_OAuth2Client):
+    SESSION_REQUEST_PARAMS: list[str]
+    client_auth_class = OAuth2ClientAuth
+    token_auth_class = OAuth2Auth
+    oauth_error_class = OAuthError  # type: ignore[assignment]
+    def __init__(
+        self,
+        client_id=None,
+        client_secret=None,
+        token_endpoint_auth_method=None,
+        revocation_endpoint_auth_method=None,
+        scope=None,
+        redirect_uri=None,
+        token=None,
+        token_placement="header",
+        update_token=None,
+        **kwargs,
+    ) -> None: ...
+    @staticmethod
+    def handle_error(error_type: str | None, error_description: str | None) -> NoReturn: ...
+    def request(self, method, url, withhold_token: bool = False, auth=..., **kwargs): ...
+    def stream(self, method, url, withhold_token: bool = False, auth=..., **kwargs): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/httpx_client/utils.pyi

@@ -0,0 +1,7 @@
+from _typeshed import Incomplete
+from typing import Final
+
+HTTPX_CLIENT_KWARGS: Final[list[str]]
+
+def extract_client_kwargs(kwargs) -> dict[str, Incomplete]: ...
+def build_request(url, headers, body, initial_request): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/requests_client/__init__.pyi

@@ -0,0 +1,28 @@
+from authlib.oauth1 import (
+    SIGNATURE_HMAC_SHA1 as SIGNATURE_HMAC_SHA1,
+    SIGNATURE_PLAINTEXT as SIGNATURE_PLAINTEXT,
+    SIGNATURE_RSA_SHA1 as SIGNATURE_RSA_SHA1,
+    SIGNATURE_TYPE_BODY as SIGNATURE_TYPE_BODY,
+    SIGNATURE_TYPE_HEADER as SIGNATURE_TYPE_HEADER,
+    SIGNATURE_TYPE_QUERY as SIGNATURE_TYPE_QUERY,
+)
+
+from ..base_client import OAuthError as OAuthError
+from .assertion_session import AssertionSession as AssertionSession
+from .oauth1_session import OAuth1Auth as OAuth1Auth, OAuth1Session as OAuth1Session
+from .oauth2_session import OAuth2Auth as OAuth2Auth, OAuth2Session as OAuth2Session
+
+__all__ = [
+    "OAuthError",
+    "OAuth1Session",
+    "OAuth1Auth",
+    "SIGNATURE_HMAC_SHA1",
+    "SIGNATURE_RSA_SHA1",
+    "SIGNATURE_PLAINTEXT",
+    "SIGNATURE_TYPE_HEADER",
+    "SIGNATURE_TYPE_QUERY",
+    "SIGNATURE_TYPE_BODY",
+    "OAuth2Session",
+    "OAuth2Auth",
+    "AssertionSession",
+]

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/requests_client/assertion_session.pyi

@@ -0,0 +1,31 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc7521 import AssertionClient
+
+from .oauth2_session import OAuth2Auth
+
+class AssertionAuth(OAuth2Auth):
+    def ensure_active_token(self): ...
+
+# Inherits from requests.Session
+class AssertionSession(AssertionClient):
+    token_auth_class = AssertionAuth
+    JWT_BEARER_GRANT_TYPE: Incomplete
+    ASSERTION_METHODS: Incomplete
+    DEFAULT_GRANT_TYPE: Incomplete
+    default_timeout: Incomplete
+    def __init__(
+        self,
+        token_endpoint,
+        issuer,
+        subject,
+        audience=None,
+        grant_type=None,
+        claims=None,
+        token_placement="header",
+        scope=None,
+        default_timeout=None,
+        leeway=60,
+        **kwargs,
+    ) -> None: ...
+    def request(self, method, url, withhold_token=False, auth=None, **kwargs): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/requests_client/oauth1_session.pyi

@@ -0,0 +1,29 @@
+from typing import NoReturn
+
+from authlib.oauth1 import ClientAuth
+from authlib.oauth1.client import OAuth1Client
+
+# Inherits from requests.auth.AuthBase
+class OAuth1Auth(ClientAuth):
+    def __call__(self, req): ...
+
+# Inherits from requests.Session
+class OAuth1Session(OAuth1Client):
+    auth_class = OAuth1Auth
+    def __init__(
+        self,
+        client_id,
+        client_secret=None,
+        token=None,
+        token_secret=None,
+        redirect_uri=None,
+        rsa_key=None,
+        verifier=None,
+        signature_method=...,
+        signature_type=...,
+        force_include_body=False,
+        **kwargs,
+    ) -> None: ...
+    def rebuild_auth(self, prepared_request, response) -> None: ...
+    @staticmethod
+    def handle_error(error_type: str | None, error_description: str | None) -> NoReturn: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/requests_client/oauth2_session.pyi

@@ -0,0 +1,43 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.auth import ClientAuth, TokenAuth
+from authlib.oauth2.client import OAuth2Client
+
+from ..base_client import OAuthError
+
+__all__ = ["OAuth2Session", "OAuth2Auth"]
+
+# Inherits from requests.auth.AuthBase
+class OAuth2Auth(TokenAuth):
+    def ensure_active_token(self) -> None: ...
+    def __call__(self, req): ...
+
+# Inherits from requests.auth.AuthBase
+class OAuth2ClientAuth(ClientAuth):
+    def __call__(self, req): ...
+
+# Inherits from requests.Session
+class OAuth2Session(OAuth2Client):
+    client_auth_class = OAuth2ClientAuth
+    token_auth_class = OAuth2Auth
+    oauth_error_class = OAuthError  # type: ignore[assignment]
+    SESSION_REQUEST_PARAMS: tuple[str, ...]
+    default_timeout: Incomplete
+    def __init__(
+        self,
+        client_id=None,
+        client_secret=None,
+        token_endpoint_auth_method=None,
+        revocation_endpoint_auth_method=None,
+        scope=None,
+        state=None,
+        redirect_uri=None,
+        token=None,
+        token_placement="header",
+        update_token=None,
+        leeway=60,
+        default_timeout=None,
+        **kwargs,
+    ) -> None: ...
+    def fetch_access_token(self, url=None, **kwargs): ...
+    def request(self, method, url, withhold_token=False, auth=None, **kwargs): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/requests_client/utils.pyi

@@ -0,0 +1,6 @@
+from _typeshed import Incomplete
+from typing import Final
+
+REQUESTS_SESSION_KWARGS: Final = ["proxies", "hooks", "stream", "verify", "cert", "max_redirects", "trust_env"]
+
+def update_session_configure(session, kwargs: dict[str, Incomplete]) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/sqla_oauth2/__init__.pyi

@@ -0,0 +1,20 @@
+from .client_mixin import OAuth2ClientMixin as OAuth2ClientMixin
+from .functions import (
+    create_bearer_token_validator as create_bearer_token_validator,
+    create_query_client_func as create_query_client_func,
+    create_query_token_func as create_query_token_func,
+    create_revocation_endpoint as create_revocation_endpoint,
+    create_save_token_func as create_save_token_func,
+)
+from .tokens_mixins import OAuth2AuthorizationCodeMixin as OAuth2AuthorizationCodeMixin, OAuth2TokenMixin as OAuth2TokenMixin
+
+__all__ = [
+    "OAuth2ClientMixin",
+    "OAuth2AuthorizationCodeMixin",
+    "OAuth2TokenMixin",
+    "create_query_client_func",
+    "create_save_token_func",
+    "create_query_token_func",
+    "create_revocation_endpoint",
+    "create_bearer_token_validator",
+]

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/sqla_oauth2/client_mixin.pyi

@@ -0,0 +1,55 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6749 import ClientMixin
+
+class OAuth2ClientMixin(ClientMixin):
+    client_id: Incomplete
+    client_secret: Incomplete
+    client_id_issued_at: Incomplete
+    client_secret_expires_at: Incomplete
+    _client_metadata: Incomplete
+    @property
+    def client_info(self) -> dict[str, Incomplete]: ...
+    @property
+    def client_metadata(self): ...
+    def set_client_metadata(self, value) -> None: ...
+    @property
+    def redirect_uris(self): ...
+    @property
+    def token_endpoint_auth_method(self): ...
+    @property
+    def grant_types(self): ...
+    @property
+    def response_types(self): ...
+    @property
+    def client_name(self): ...
+    @property
+    def client_uri(self): ...
+    @property
+    def logo_uri(self): ...
+    @property
+    def scope(self): ...
+    @property
+    def contacts(self): ...
+    @property
+    def tos_uri(self): ...
+    @property
+    def policy_uri(self): ...
+    @property
+    def jwks_uri(self): ...
+    @property
+    def jwks(self): ...
+    @property
+    def software_id(self): ...
+    @property
+    def software_version(self): ...
+    @property
+    def id_token_signed_response_alg(self): ...
+    def get_client_id(self): ...
+    def get_default_redirect_uri(self): ...
+    def get_allowed_scope(self, scope) -> str: ...
+    def check_redirect_uri(self, redirect_uri) -> bool: ...
+    def check_client_secret(self, client_secret) -> bool: ...
+    def check_endpoint_auth_method(self, method, endpoint) -> bool: ...
+    def check_response_type(self, response_type) -> bool: ...
+    def check_grant_type(self, grant_type) -> bool: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/sqla_oauth2/functions.pyi

@@ -0,0 +1,21 @@
+from _typeshed import Incomplete
+from collections.abc import Callable
+from typing import type_check_only
+
+from authlib.oauth2.rfc6750 import BearerTokenValidator
+from authlib.oauth2.rfc7009 import RevocationEndpoint
+
+@type_check_only
+class _RevocationEndpoint(RevocationEndpoint):
+    def query_token(self, token, token_type_hint): ...
+    def revoke_token(self, token, request) -> None: ...
+
+@type_check_only
+class _BearerTokenValidator(BearerTokenValidator):
+    def authenticate_token(self, token_string): ...
+
+def create_query_client_func(session, client_model) -> Callable[[Incomplete], Incomplete]: ...
+def create_save_token_func(session, token_model) -> Callable[[Incomplete, Incomplete], None]: ...
+def create_query_token_func(session, token_model) -> Callable[[Incomplete, Incomplete], Incomplete]: ...
+def create_revocation_endpoint(session, token_model) -> type[_RevocationEndpoint]: ...
+def create_bearer_token_validator(session, token_model) -> type[_BearerTokenValidator]: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/sqla_oauth2/tokens_mixins.pyi

@@ -0,0 +1,39 @@
+from _typeshed import Incomplete
+
+from authlib.oauth2.rfc6749 import AuthorizationCodeMixin, TokenMixin
+
+class OAuth2AuthorizationCodeMixin(AuthorizationCodeMixin):
+    code: Incomplete
+    client_id: Incomplete
+    redirect_uri: Incomplete
+    response_type: Incomplete
+    scope: Incomplete
+    nonce: Incomplete
+    auth_time: Incomplete
+    acr: Incomplete
+    amr: Incomplete
+    code_challenge: Incomplete
+    code_challenge_method: Incomplete
+    def is_expired(self) -> bool: ...
+    def get_redirect_uri(self): ...
+    def get_scope(self): ...
+    def get_auth_time(self): ...
+    def get_acr(self): ...
+    def get_amr(self): ...
+    def get_nonce(self): ...
+
+class OAuth2TokenMixin(TokenMixin):
+    client_id: Incomplete
+    token_type: Incomplete
+    access_token: Incomplete
+    refresh_token: Incomplete
+    scope: Incomplete
+    issued_at: Incomplete
+    access_token_revoked_at: Incomplete
+    refresh_token_revoked_at: Incomplete
+    expires_in: Incomplete
+    def check_client(self, client) -> bool: ...
+    def get_scope(self): ...
+    def get_expires_in(self): ...
+    def is_revoked(self): ...
+    def is_expired(self) -> bool: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/starlette_client/__init__.pyi

@@ -0,0 +1,14 @@
+from _typeshed import Incomplete
+
+from ..base_client import BaseOAuth, OAuthError as OAuthError
+from .apps import StarletteOAuth1App as StarletteOAuth1App, StarletteOAuth2App as StarletteOAuth2App
+from .integration import StarletteIntegration as StarletteIntegration
+
+class OAuth(BaseOAuth):
+    oauth1_client_cls = StarletteOAuth1App
+    oauth2_client_cls = StarletteOAuth2App
+    framework_integration_cls = StarletteIntegration
+    config: Incomplete
+    def __init__(self, config=None, cache=None, fetch_token=None, update_token=None) -> None: ...
+
+__all__ = ["OAuth", "OAuthError", "StarletteIntegration", "StarletteOAuth1App", "StarletteOAuth2App"]

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/starlette_client/apps.pyi

@@ -0,0 +1,16 @@
+from ..base_client import BaseApp
+from ..base_client.async_app import AsyncOAuth1Mixin, AsyncOAuth2Mixin
+from ..base_client.async_openid import AsyncOpenIDMixin
+from ..httpx_client import AsyncOAuth1Client, AsyncOAuth2Client
+
+class StarletteAppMixin:
+    async def save_authorize_data(self, request, **kwargs) -> None: ...
+    async def authorize_redirect(self, request, redirect_uri=None, **kwargs): ...
+
+class StarletteOAuth1App(StarletteAppMixin, AsyncOAuth1Mixin, BaseApp):
+    client_cls = AsyncOAuth1Client
+    async def authorize_access_token(self, request, **kwargs): ...
+
+class StarletteOAuth2App(StarletteAppMixin, AsyncOAuth2Mixin, AsyncOpenIDMixin, BaseApp):
+    client_cls = AsyncOAuth2Client
+    async def authorize_access_token(self, request, **kwargs): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/integrations/starlette_client/integration.pyi

@@ -0,0 +1,13 @@
+from _typeshed import Incomplete
+from typing import Any
+
+from ..base_client import FrameworkIntegration
+
+class StarletteIntegration(FrameworkIntegration):
+    # annotated by source code
+    async def get_state_data(self, session: dict[str, Any] | None, state: str) -> dict[str, Any]: ...
+    async def set_state_data(self, session: dict[str, Any] | None, state: str, data: Any) -> None: ...
+    async def clear_state_data(self, session: dict[str, Any] | None, state: str) -> None: ...
+    def update_token(self, token, refresh_token=None, access_token=None) -> None: ...
+    @staticmethod
+    def load_config(oauth, name, params) -> dict[Incomplete, Incomplete]: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/drafts/_jwe_algorithms.pyi

@@ -1,6 +1,6 @@
 from _typeshed import Incomplete
 from collections.abc import Iterable
-from typing import ClassVar
+from typing import ClassVar, Final
 
 from authlib.jose.rfc7516 import JWEAlgorithmWithTagAwareKeyAgreement
 
@@ -13,17 +13,19 @@ class ECDH1PUAlgorithm(JWEAlgorithmWithTagAwareKeyAgreement):
     aeskw: Incomplete
     def __init__(self, key_size=None) -> None: ...
     def prepare_key(self, raw_data): ...
-    def generate_preset(self, enc_alg, key): ...
+    def generate_preset(self, enc_alg, key) -> dict[str, Incomplete]: ...
     def compute_shared_key(self, shared_key_e, shared_key_s): ...
-    def compute_fixed_info(self, headers, bit_size, tag): ...
-    def compute_derived_key(self, shared_key, fixed_info, bit_size): ...
-    def deliver_at_sender(self, sender_static_key, sender_ephemeral_key, recipient_pubkey, headers, bit_size, tag): ...
-    def deliver_at_recipient(self, recipient_key, sender_static_pubkey, sender_ephemeral_pubkey, headers, bit_size, tag): ...
-    def generate_keys_and_prepare_headers(self, enc_alg, key, sender_key, preset=None): ...
+    def compute_fixed_info(self, headers, bit_size, tag) -> bytes: ...
+    def compute_derived_key(self, shared_key, fixed_info, bit_size) -> bytes: ...
+    def deliver_at_sender(self, sender_static_key, sender_ephemeral_key, recipient_pubkey, headers, bit_size, tag) -> bytes: ...
+    def deliver_at_recipient(
+        self, recipient_key, sender_static_pubkey, sender_ephemeral_pubkey, headers, bit_size, tag
+    ) -> bytes: ...
+    def generate_keys_and_prepare_headers(self, enc_alg, key, sender_key, preset=None) -> dict[str, Incomplete]: ...
     def agree_upon_key_and_wrap_cek(self, enc_alg, headers, key, sender_key, epk, cek, tag): ...
-    def wrap(self, enc_alg, headers, key, sender_key, preset=None): ...
-    def unwrap(self, enc_alg, ek, headers, key, sender_key, tag=None): ...
+    def wrap(self, enc_alg, headers, key, sender_key, preset=None) -> dict[str, Incomplete]: ...
+    def unwrap(self, enc_alg, ek, headers, key, sender_key, tag=None) -> bytes: ...
 
-JWE_DRAFT_ALG_ALGORITHMS: Incomplete
+JWE_DRAFT_ALG_ALGORITHMS: Final[list[ECDH1PUAlgorithm]]
 
 def register_jwe_alg_draft(cls) -> None: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/drafts/_jwe_enc_cryptography.pyi

@@ -9,5 +9,5 @@ class C20PEncAlgorithm(JWEEncAlgorithm):
     key_size: Incomplete
     CEK_SIZE: Incomplete
     def __init__(self, key_size) -> None: ...
-    def encrypt(self, msg, aad, iv, key): ...
-    def decrypt(self, ciphertext, aad, iv, tag, key): ...
+    def encrypt(self, msg, aad, iv, key) -> tuple[bytes, bytes]: ...
+    def decrypt(self, ciphertext, aad, iv, tag, key) -> bytes: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/jwk.pyi

@@ -1,2 +1,7 @@
+from _typeshed import Incomplete
+from typing_extensions import deprecated
+
+@deprecated("Please use `JsonWebKey` directly.")
 def loads(obj, kid=None): ...
-def dumps(key, kty=None, **params): ...
+@deprecated("Please use `JsonWebKey` directly.")
+def dumps(key, kty=None, **params) -> dict[Incomplete, Incomplete]: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/rfc7515/jws.pyi

@@ -1,5 +1,7 @@
 from _typeshed import Incomplete
 
+from .models import JWSObject
+
 class JsonWebSignature:
     REGISTERED_HEADER_PARAMETER_NAMES: frozenset[str]
     MAX_CONTENT_LENGTH: int
@@ -7,9 +9,9 @@ class JsonWebSignature:
     def __init__(self, algorithms=None, private_headers=None) -> None: ...
     @classmethod
     def register_algorithm(cls, algorithm) -> None: ...
-    def serialize_compact(self, protected, payload, key): ...
-    def deserialize_compact(self, s, key, decode=None): ...
+    def serialize_compact(self, protected, payload, key) -> bytes: ...
+    def deserialize_compact(self, s, key, decode=None) -> JWSObject: ...
     def serialize_json(self, header_obj, payload, key): ...
-    def deserialize_json(self, obj, key, decode=None): ...
+    def deserialize_json(self, obj, key, decode=None) -> JWSObject: ...
     def serialize(self, header, payload, key): ...
-    def deserialize(self, s, key, decode=None): ...
+    def deserialize(self, s, key, decode=None) -> JWSObject: ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/rfc7515/models.pyi

@@ -1,11 +1,12 @@
 from _typeshed import Incomplete
+from typing_extensions import Self
 
 class JWSAlgorithm:
     name: Incomplete
     description: Incomplete
     algorithm_type: str
     algorithm_location: str
-    def prepare_key(self, raw_data) -> None: ...
+    def prepare_key(self, raw_data): ...
     def sign(self, msg, key): ...
     def verify(self, msg, sig, key) -> bool: ...
 
@@ -14,7 +15,7 @@ class JWSHeader(dict[str, object]):
     header: Incomplete
     def __init__(self, protected, header) -> None: ...
     @classmethod
-    def from_dict(cls, obj): ...
+    def from_dict(cls, obj) -> Self: ...
 
 class JWSObject(dict[str, object]):
     header: Incomplete

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/rfc7516/jwe.pyi

@@ -1,21 +1,22 @@
 from _typeshed import Incomplete
+from collections import OrderedDict
 
 class JsonWebEncryption:
-    REGISTERED_HEADER_PARAMETER_NAMES: Incomplete
-    ALG_REGISTRY: Incomplete
-    ENC_REGISTRY: Incomplete
-    ZIP_REGISTRY: Incomplete
+    REGISTERED_HEADER_PARAMETER_NAMES: frozenset[str]
+    ALG_REGISTRY: dict[Incomplete, Incomplete]
+    ENC_REGISTRY: dict[Incomplete, Incomplete]
+    ZIP_REGISTRY: dict[Incomplete, Incomplete]
     def __init__(self, algorithms=None, private_headers=None) -> None: ...
     @classmethod
     def register_algorithm(cls, algorithm) -> None: ...
-    def serialize_compact(self, protected, payload, key, sender_key=None): ...
-    def serialize_json(self, header_obj, payload, keys, sender_key=None): ...
+    def serialize_compact(self, protected, payload, key, sender_key=None) -> bytes: ...
+    def serialize_json(self, header_obj, payload, keys, sender_key=None) -> OrderedDict[Incomplete, Incomplete]: ...
     def serialize(self, header, payload, key, sender_key=None): ...
     def deserialize_compact(self, s, key, decode=None, sender_key=None): ...
-    def deserialize_json(self, obj, key, decode=None, sender_key=None): ...
+    def deserialize_json(self, obj, key, decode=None, sender_key=None) -> dict[str, Incomplete]: ...
     def deserialize(self, obj, key, decode=None, sender_key=None): ...
     @staticmethod
-    def parse_json(obj): ...
+    def parse_json(obj) -> dict[Incomplete, Incomplete]: ...
     def get_header_alg(self, header): ...
     def get_header_enc(self, header): ...
     def get_header_zip(self, header): ...

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/rfc7516/models.pyi

@@ -2,6 +2,7 @@ from _typeshed import Incomplete
 from abc import ABCMeta
 from collections.abc import Iterable
 from typing import ClassVar
+from typing_extensions import Self
 
 class JWEAlgorithmBase(metaclass=ABCMeta):
     EXTRA_HEADERS: ClassVar[Iterable[str] | None]
@@ -9,18 +10,18 @@ class JWEAlgorithmBase(metaclass=ABCMeta):
     description: str | None
     algorithm_type: str
     algorithm_location: str
-    def prepare_key(self, raw_data) -> None: ...
-    def generate_preset(self, enc_alg, key) -> None: ...
+    def prepare_key(self, raw_data): ...
+    def generate_preset(self, enc_alg, key): ...
 
 class JWEAlgorithm(JWEAlgorithmBase, metaclass=ABCMeta):
-    def wrap(self, enc_alg, headers, key, preset=None) -> None: ...
-    def unwrap(self, enc_alg, ek, headers, key) -> None: ...
+    def wrap(self, enc_alg, headers, key, preset=None): ...
+    def unwrap(self, enc_alg, ek, headers, key): ...
 
 class JWEAlgorithmWithTagAwareKeyAgreement(JWEAlgorithmBase, metaclass=ABCMeta):
-    def generate_keys_and_prepare_headers(self, enc_alg, key, sender_key, preset=None) -> None: ...
-    def agree_upon_key_and_wrap_cek(self, enc_alg, headers, key, sender_key, epk, cek, tag) -> None: ...
-    def wrap(self, enc_alg, headers, key, sender_key, preset=None) -> None: ...
-    def unwrap(self, enc_alg, ek, headers, key, sender_key, tag=None) -> None: ...
+    def generate_keys_and_prepare_headers(self, enc_alg, key, sender_key, preset=None): ...
+    def agree_upon_key_and_wrap_cek(self, enc_alg, headers, key, sender_key, epk, cek, tag): ...
+    def wrap(self, enc_alg, headers, key, sender_key, preset=None): ...
+    def unwrap(self, enc_alg, ek, headers, key, sender_key, tag=None): ...
 
 class JWEEncAlgorithm:
     name: str | None
@@ -32,8 +33,8 @@ class JWEEncAlgorithm:
     def generate_cek(self): ...
     def generate_iv(self): ...
     def check_iv(self, iv) -> None: ...
-    def encrypt(self, msg, aad, iv, key) -> None: ...
-    def decrypt(self, ciphertext, aad, iv, tag, key) -> None: ...
+    def encrypt(self, msg, aad, iv, key): ...
+    def decrypt(self, ciphertext, aad, iv, tag, key): ...
 
 class JWEZipAlgorithm:
     name: Incomplete
@@ -49,7 +50,7 @@ class JWESharedHeader(dict[str, object]):
     def __init__(self, protected, unprotected) -> None: ...
     def update_protected(self, addition) -> None: ...
     @classmethod
-    def from_dict(cls, obj): ...
+    def from_dict(cls, obj) -> Self: ...
 
 class JWEHeader(dict[str, object]):
     protected: Incomplete

package/dist/typeshed-fallback/stubs/Authlib/authlib/jose/rfc7517/_cryptography_key.pyi

@@ -1 +1,35 @@
-def load_pem_key(raw, ssh_type=None, key_type=None, password=None): ...
+from _typeshed import ReadableBuffer
+from collections.abc import Iterable
+from typing import Literal, SupportsBytes, SupportsIndex, overload
+
+from cryptography.hazmat.primitives.asymmetric.types import PrivateKeyTypes, PublicKeyTypes
+from cryptography.hazmat.primitives.serialization.ssh import SSHPublicKeyTypes
+
+@overload  # if ssh_type is None
+def load_pem_key(
+    raw: str | bytes | float | Iterable[SupportsIndex] | SupportsIndex | SupportsBytes | ReadableBuffer,
+    ssh_type: None = None,
+    key_type: str | None = None,
+    password: bytes | None = None,
+) -> PublicKeyTypes | PrivateKeyTypes: ...
+@overload  # if key_type == "public"
+def load_pem_key(
+    raw: str | bytes | float | Iterable[SupportsIndex] | SupportsIndex | SupportsBytes | ReadableBuffer,
+    ssh_type: ReadableBuffer | tuple[ReadableBuffer, ...] | None = None,
+    key_type: Literal["public"] = ...,
+    password: bytes | None = None,
+) -> PublicKeyTypes: ...
+@overload  # if key_type is not empty, but not "public"
+def load_pem_key(
+    raw: str | bytes | float | Iterable[SupportsIndex] | SupportsIndex | SupportsBytes | ReadableBuffer,
+    ssh_type: ReadableBuffer | tuple[ReadableBuffer, ...] | None = None,
+    key_type: str = ...,
+    password: bytes | None = None,
+) -> PrivateKeyTypes: ...
+@overload  # if ssh_type is not empty
+def load_pem_key(
+    raw: str | bytes | float | Iterable[SupportsIndex] | SupportsIndex | SupportsBytes | ReadableBuffer,
+    ssh_type: ReadableBuffer | tuple[ReadableBuffer, ...] = ...,
+    key_type: str | None = None,
+    password: bytes | None = None,
+) -> SSHPublicKeyTypes | PublicKeyTypes | PrivateKeyTypes: ...