swarmauri_crypto_jwe 0.3.0.dev5__tar.gz → 0.11.0.dev1__tar.gz

{swarmauri_crypto_jwe-0.3.0.dev5 → swarmauri_crypto_jwe-0.11.0.dev1}/PKG-INFO

@@ -1,25 +1,26 @@
 Metadata-Version: 2.4
 Name: swarmauri_crypto_jwe
-Version: 0.3.0.dev5
+Version: 0.11.0.dev1
 Summary: RFC 7516/7518 compliant JWE crypto provider for Swarmauri
 License-Expression: Apache-2.0
 License-File: LICENSE
 Keywords: swarmauri,sdk,standards,crypto,jwe,cryptography
 Author: Jacob Stewart
 Author-email: jacob@swarmauri.com
-Requires-Python: >=3.10,<3.13
+Requires-Python: >=3.10,<3.15
 Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Natural Language :: English
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
 Classifier: Development Status :: 3 - Alpha
 Classifier: Topic :: Security :: Cryptography
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Provides-Extra: cbor
 Provides-Extra: json
 Requires-Dist: cbor2 ; extra == "cbor"
@@ -28,17 +29,21 @@ Requires-Dist: swarmauri_base
 Requires-Dist: swarmauri_core
 Description-Content-Type: text/markdown
 
-![Swarmauri Logo](https://github.com/swarmauri/swarmauri-sdk/blob/3d4d1cfa949399d7019ae9d8f296afba773dfb7f/assets/swarmauri.brand.theme.svg)
+![Swarmauri Logo](https://raw.githubusercontent.com/swarmauri/swarmauri-sdk/master/assets/swarmauri_sdk_brand.png)
 
 <p align="center">
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/dm/swarmauri_crypto_jwe" alt="PyPI - Downloads"/></a>
-    <a href="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe/"><img alt="Hits" src="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe.svg"/></a>
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/pyversions/swarmauri_crypto_jwe" alt="PyPI - Python Version"/></a>
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/l/swarmauri_crypto_jwe" alt="PyPI - License"/></a>
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/v/swarmauri_crypto_jwe?label=swarmauri_crypto_jwe&color=green" alt="PyPI - swarmauri_crypto_jwe"/></a>
-</p>
-
----
+    <a href="https://pepy.tech/project/swarmauri_crypto_jwe/">
+        <img src="https://static.pepy.tech/badge/swarmauri_crypto_jwe/month" alt="PyPI - Downloads"/></a>
+    <a href="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe/">
+        <img alt="Hits" src="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe.svg"/></a>
+    <a href="https://pypi.org/project/swarmauri_crypto_jwe/">
+        <img src="https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13%20%7C%203.14-blue" alt="PyPI - Python Version"/></a>
+    <a href="https://pypi.org/project/swarmauri_crypto_jwe/">
+        <img src="https://img.shields.io/pypi/l/swarmauri_crypto_jwe" alt="PyPI - License"/></a>
+    <a href="https://pypi.org/project/swarmauri_crypto_jwe/">
+        <img src="https://img.shields.io/pypi/v/swarmauri_crypto_jwe?label=swarmauri_crypto_jwe&color=green" alt="PyPI - swarmauri_crypto_jwe"/></a>
+    <a href="https://discord.gg/N4UpBuQv8T">
+        <img src="https://img.shields.io/badge/Discord-Join%20Chat-5865F2?logo=discord&logoColor=white" alt="Discord"/></a></p>
 
 ## Swarmauri Crypto JWE
 
@@ -127,9 +132,9 @@ crypto = pm.load("swarmauri.cryptos", "JweCrypto")
 
 **Parameters**
 
-- `alg` – `JWAAlg` member describing the key management algorithm (`JWAAlg.RSA_OAEP_256`, `JWAAlg.DIR`, etc.).
-- `enc` – `JWAAlg` member describing the content encryption algorithm (`JWAAlg.A256GCM`, `JWAAlg.A128GCM`, etc.).
-- `key` – mapping containing the key material used for encryption:
+- `alg` ? `JWAAlg` member describing the key management algorithm (`JWAAlg.RSA_OAEP_256`, `JWAAlg.DIR`, etc.).
+- `enc` ? `JWAAlg` member describing the content encryption algorithm (`JWAAlg.A256GCM`, `JWAAlg.A128GCM`, etc.).
+- `key` ? mapping containing the key material used for encryption:
   - `{"k": bytes}` for direct symmetric keys (`dir`).
   - `{"pub": rsa_public_key}` for RSA OAEP, where the public key may be PEM bytes or an `RSAPublicKey` instance.
   - `{"pub": ec_public_key}` for ECDH-ES with PEM, JWK, or key objects.
@@ -146,3 +151,5 @@ The provider is registered under the `swarmauri.cryptos` entry point as `JweCryp
 If you want to contribute to swarmauri-sdk, read up on our
 [guidelines for contributing](https://github.com/swarmauri/swarmauri-sdk/blob/master/CONTRIBUTING.md)
 that will help you get started.
+
+

{swarmauri_crypto_jwe-0.3.0.dev5 → swarmauri_crypto_jwe-0.11.0.dev1}/README.md

@@ -1,14 +1,18 @@
-![Swarmauri Logo](https://github.com/swarmauri/swarmauri-sdk/blob/3d4d1cfa949399d7019ae9d8f296afba773dfb7f/assets/swarmauri.brand.theme.svg)
+![Swarmauri Logo](https://raw.githubusercontent.com/swarmauri/swarmauri-sdk/master/assets/swarmauri_sdk_brand.png)
 
 <p align="center">
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/dm/swarmauri_crypto_jwe" alt="PyPI - Downloads"/></a>
-    <a href="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe/"><img alt="Hits" src="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe.svg"/></a>
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/pyversions/swarmauri_crypto_jwe" alt="PyPI - Python Version"/></a>
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/l/swarmauri_crypto_jwe" alt="PyPI - License"/></a>
-    <a href="https://pypi.org/project/swarmauri_crypto_jwe/"><img src="https://img.shields.io/pypi/v/swarmauri_crypto_jwe?label=swarmauri_crypto_jwe&color=green" alt="PyPI - swarmauri_crypto_jwe"/></a>
-</p>
-
----
+    <a href="https://pepy.tech/project/swarmauri_crypto_jwe/">
+        <img src="https://static.pepy.tech/badge/swarmauri_crypto_jwe/month" alt="PyPI - Downloads"/></a>
+    <a href="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe/">
+        <img alt="Hits" src="https://hits.sh/github.com/swarmauri/swarmauri-sdk/tree/master/pkgs/standards/swarmauri_crypto_jwe.svg"/></a>
+    <a href="https://pypi.org/project/swarmauri_crypto_jwe/">
+        <img src="https://img.shields.io/badge/python-3.10%20%7C%203.11%20%7C%203.12%20%7C%203.13%20%7C%203.14-blue" alt="PyPI - Python Version"/></a>
+    <a href="https://pypi.org/project/swarmauri_crypto_jwe/">
+        <img src="https://img.shields.io/pypi/l/swarmauri_crypto_jwe" alt="PyPI - License"/></a>
+    <a href="https://pypi.org/project/swarmauri_crypto_jwe/">
+        <img src="https://img.shields.io/pypi/v/swarmauri_crypto_jwe?label=swarmauri_crypto_jwe&color=green" alt="PyPI - swarmauri_crypto_jwe"/></a>
+    <a href="https://discord.gg/N4UpBuQv8T">
+        <img src="https://img.shields.io/badge/Discord-Join%20Chat-5865F2?logo=discord&logoColor=white" alt="Discord"/></a></p>
 
 ## Swarmauri Crypto JWE
 
@@ -97,9 +101,9 @@ crypto = pm.load("swarmauri.cryptos", "JweCrypto")
 
 **Parameters**
 
-- `alg` – `JWAAlg` member describing the key management algorithm (`JWAAlg.RSA_OAEP_256`, `JWAAlg.DIR`, etc.).
-- `enc` – `JWAAlg` member describing the content encryption algorithm (`JWAAlg.A256GCM`, `JWAAlg.A128GCM`, etc.).
-- `key` – mapping containing the key material used for encryption:
+- `alg` ? `JWAAlg` member describing the key management algorithm (`JWAAlg.RSA_OAEP_256`, `JWAAlg.DIR`, etc.).
+- `enc` ? `JWAAlg` member describing the content encryption algorithm (`JWAAlg.A256GCM`, `JWAAlg.A128GCM`, etc.).
+- `key` ? mapping containing the key material used for encryption:
   - `{"k": bytes}` for direct symmetric keys (`dir`).
   - `{"pub": rsa_public_key}` for RSA OAEP, where the public key may be PEM bytes or an `RSAPublicKey` instance.
   - `{"pub": ec_public_key}` for ECDH-ES with PEM, JWK, or key objects.
@@ -115,4 +119,5 @@ The provider is registered under the `swarmauri.cryptos` entry point as `JweCryp
 
 If you want to contribute to swarmauri-sdk, read up on our
 [guidelines for contributing](https://github.com/swarmauri/swarmauri-sdk/blob/master/CONTRIBUTING.md)
-that will help you get started.
+that will help you get started.
+

{swarmauri_crypto_jwe-0.3.0.dev5 → swarmauri_crypto_jwe-0.11.0.dev1}/pyproject.toml

@@ -1,24 +1,25 @@
 [project]
 name = "swarmauri_crypto_jwe"
-version = "0.3.0.dev5"
+version = "0.11.0.dev1"
 description = "RFC 7516/7518 compliant JWE crypto provider for Swarmauri"
 license = "Apache-2.0"
 readme = "README.md"
-requires-python = ">=3.10,<3.13"
+requires-python = ">=3.10,<3.15"
 authors = [{ name = "Jacob Stewart", email = "jacob@swarmauri.com" }]
 classifiers = [
     "License :: OSI Approved :: Apache Software License",
     "Natural Language :: English",
-    "Programming Language :: Python :: 3.10",
-    "Programming Language :: Python :: 3.11",
-    "Programming Language :: Python :: 3.12",
-    "Programming Language :: Python :: 3.13",
     "Development Status :: 3 - Alpha",
     "Topic :: Security :: Cryptography",
     "Intended Audience :: Developers",
     "Programming Language :: Python",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
 ]
 dependencies = [
     "swarmauri_core",

{swarmauri_crypto_jwe-0.3.0.dev5 → swarmauri_crypto_jwe-0.11.0.dev1}/swarmauri_crypto_jwe/JweCrypto.py

@@ -47,7 +47,9 @@ def _cek_len_for_enc(enc: JWAAlg) -> int:
         return 24
     if enc == JWAAlg.A256GCM:
         return 32
-    raise ValueError(f"Unsupported enc '{enc.value}'. Use A128GCM/A192GCM/A256GCM.")
+    raise ValueError(
+        f"Unsupported enc '{enc.value}'. Use A128GCM/A192GCM/A256GCM."
+    )
 
 
 def _hash_for_oaep(alg: JWAAlg):
@@ -68,7 +70,9 @@ def _compute_aad(protected_b64: str, aad_bytes: Optional[bytes]) -> bytes:
     return (protected_b64 + "." + _b64u(aad_bytes)).encode("ascii")
 
 
-def _jwk_ec_public_numbers(jwk: Mapping[str, Any]) -> ec.EllipticCurvePublicNumbers:
+def _jwk_ec_public_numbers(
+    jwk: Mapping[str, Any],
+) -> ec.EllipticCurvePublicNumbers:
     crv = jwk.get("crv")
     curve_map = {
         "P-256": ec.SECP256R1(),
@@ -85,7 +89,11 @@ def _jwk_ec_public_numbers(jwk: Mapping[str, Any]) -> ec.EllipticCurvePublicNumb
 def _ec_jwk_from_public_key(pk: ec.EllipticCurvePublicKey) -> Dict[str, Any]:
     numbers = pk.public_numbers()
     crv = pk.curve.name
-    crv_map = {"secp256r1": "P-256", "secp384r1": "P-384", "secp521r1": "P-521"}
+    crv_map = {
+        "secp256r1": "P-256",
+        "secp384r1": "P-384",
+        "secp521r1": "P-521",
+    }
     if crv not in crv_map:
         raise ValueError(f"Unsupported EC curve: {crv}")
     size = (pk.curve.key_size + 7) // 8
@@ -96,7 +104,8 @@ def _ec_jwk_from_public_key(pk: ec.EllipticCurvePublicKey) -> Dict[str, Any]:
 
 def _x25519_jwk_from_public_key(pk: x25519.X25519PublicKey) -> Dict[str, Any]:
     raw = pk.public_bytes(
-        encoding=serialization.Encoding.Raw, format=serialization.PublicFormat.Raw
+        encoding=serialization.Encoding.Raw,
+        format=serialization.PublicFormat.Raw,
     )
     return {"kty": "OKP", "crv": "X25519", "x": _b64u(raw)}
 
@@ -105,7 +114,9 @@ def _load_rsa_public(key: Any) -> rsa.RSAPublicKey:
     if isinstance(key, rsa.RSAPublicKey):
         return key
     if isinstance(key, (bytes, bytearray, str)):
-        data = key if isinstance(key, (bytes, bytearray)) else key.encode("utf-8")
+        data = (
+            key if isinstance(key, (bytes, bytearray)) else key.encode("utf-8")
+        )
         pk = load_pem_public_key(data)
         if not isinstance(pk, rsa.RSAPublicKey):
             raise TypeError("PEM provided is not an RSA public key")
@@ -128,7 +139,9 @@ def _load_rsa_private(
     elif isinstance(password, (bytes, bytearray)):
         pwd = bytes(password)
     if isinstance(key, (bytes, bytearray, str)):
-        data = key if isinstance(key, (bytes, bytearray)) else key.encode("utf-8")
+        data = (
+            key if isinstance(key, (bytes, bytearray)) else key.encode("utf-8")
+        )
         sk = load_pem_private_key(data, password=pwd)
         if not isinstance(sk, rsa.RSAPrivateKey):
             raise TypeError("PEM provided is not an RSA private key")
@@ -146,7 +159,7 @@ def _load_ecdh_recipient_public(jwk_or_pem: Any) -> Tuple[str, Any]:
             x = _b64u_dec(jwk_or_pem["x"])
             return "X25519", x25519.X25519PublicKey.from_public_bytes(x)
         raise ValueError(
-            f"Unsupported JWK kty/crv for ECDH-ES: {kty}/{jwk_or_pem.get('crv')}"
+            f"Unsupported JWK kty/crv for ECDH-ES: {kty}/{jwk_or_pem.get('crv')}"  # noqa: E501
         )
     if isinstance(jwk_or_pem, (bytes, bytearray, str)):
         data = (
@@ -225,7 +238,8 @@ class JweCrypto:
     ) -> JWECompact:
         """Encrypt a payload into a compact JWE string.
 
-        payload (Union[bytes, str, Mapping[str, Any]]): Data to encrypt. Strings and
+        payload (Union[bytes, str, Mapping[str, Any]]): Data to encrypt.
+        Strings and
             mappings are encoded as UTF-8 JSON.
         alg (JWAAlg): Key management algorithm.
         enc (JWAAlg): Content encryption algorithm.
@@ -259,11 +273,13 @@ class JweCrypto:
         if alg == JWAAlg.DIR:
             secret = key.get("k")
             secret_b = (
-                secret.encode("utf-8") if isinstance(secret, str) else bytes(secret)
+                secret.encode("utf-8")
+                if isinstance(secret, str)
+                else bytes(secret)
             )
             if len(secret_b) != _cek_len_for_enc(enc):
                 raise ValueError(
-                    f"'dir' key size must equal enc key size ({_cek_len_for_enc(enc)} bytes)"
+                    f"'dir' key size must equal enc key size ({_cek_len_for_enc(enc)} bytes)"  # noqa: E501
                 )
             cek = secret_b
         elif alg in (JWAAlg.RSA_OAEP, JWAAlg.RSA_OAEP_256):
@@ -351,19 +367,23 @@ class JweCrypto:
 
         jwe (JWECompact): Serialized JWE to decode.
         dir_key (Union[bytes, str]): Symmetric key when ``alg='dir'`` is used.
-        rsa_private_pem (Union[str, bytes]): RSA private key in PEM encoding for
+        rsa_private_pem (Union[str, bytes]): RSA private key in PEM encoding
+        for
             RSA-OAEP algorithms.
         rsa_private_password (Union[str, bytes]): Password for the RSA key.
         ecdh_private_key (Any): Private key for ECDH-ES.
         expected_algs (Iterable[JWAAlg]): Allowed algorithm values.
         expected_encs (Iterable[JWAAlg]): Allowed encryption values.
         aad (Union[bytes, str]): Additional authenticated data.
-        RETURNS (JweDecryptResult): Header and plaintext of the decrypted token.
+        RETURNS (JweDecryptResult): Header and plaintext of the decrypted
+        token.
         """
 
         parts = jwe.split(".")
         if len(parts) != 5:
-            raise ValueError("Invalid JWE compact: expected 5 dot-separated parts.")
+            raise ValueError(
+                "Invalid JWE compact: expected 5 dot-separated parts."
+            )
         b64_prot, b64_ekey, b64_iv, b64_ct, b64_tag = parts
 
         header = json.loads(_b64u_dec(b64_prot))
@@ -389,33 +409,49 @@ class JweCrypto:
             if dir_key is None:
                 raise ValueError("dir_key is required for alg='dir'.")
             cek = (
-                dir_key.encode("utf-8") if isinstance(dir_key, str) else bytes(dir_key)
+                dir_key.encode("utf-8")
+                if isinstance(dir_key, str)
+                else bytes(dir_key)
             )
             if len(cek) != _cek_len_for_enc(enc):
                 raise ValueError("dir_key length mismatch for enc.")
         elif alg in (JWAAlg.RSA_OAEP, JWAAlg.RSA_OAEP_256):
             if rsa_private_pem is None:
-                raise ValueError("rsa_private_pem is required for RSA-OAEP decryption.")
-            sk = _load_rsa_private(rsa_private_pem, password=rsa_private_password)
+                raise ValueError(
+                    "rsa_private_pem is required for RSA-OAEP decryption."
+                )
+            sk = _load_rsa_private(
+                rsa_private_pem, password=rsa_private_password
+            )
             ekey = _b64u_dec(b64_ekey)
             hash_alg = _hash_for_oaep(alg)
             cek = sk.decrypt(
                 ekey,
                 padding.OAEP(
-                    mgf=padding.MGF1(algorithm=hash_alg), algorithm=hash_alg, label=None
+                    mgf=padding.MGF1(algorithm=hash_alg),
+                    algorithm=hash_alg,
+                    label=None,
                 ),
             )
         elif alg == JWAAlg.ECDH_ES:
             if ecdh_private_key is None:
-                raise ValueError("ecdh_private_key is required for ECDH-ES decryption.")
+                raise ValueError(
+                    "ecdh_private_key is required for ECDH-ES decryption."
+                )
             epk = header.get("epk")
             if not isinstance(epk, Mapping):
-                raise ValueError("Missing/invalid 'epk' in JWE header for ECDH-ES.")
+                raise ValueError(
+                    "Missing/invalid 'epk' in JWE header for ECDH-ES."
+                )
             if epk.get("kty") == "OKP" and epk.get("crv") == "X25519":
                 if not isinstance(ecdh_private_key, x25519.X25519PrivateKey):
-                    raise TypeError("ECDH-ES with X25519 requires an X25519PrivateKey.")
+                    raise TypeError(
+                        "ECDH-ES with X25519 requires an X25519PrivateKey."
+                    )
                 z = ecdh_private_key.exchange(
-                    x25519.X25519PublicKey.from_public_bytes(_b64u_dec(epk["x"]))
+                    x25519.X25519PublicKey.from_public_bytes(
+                        _b64u_dec(epk["x"])
+                    )
                 )
             elif epk.get("kty") == "EC":
                 crv = epk.get("crv")
@@ -426,7 +462,9 @@ class JweCrypto:
                 }.get(crv)
                 if curve is None:
                     raise ValueError(f"Unsupported EC curve in epk: {crv}")
-                if not isinstance(ecdh_private_key, ec.EllipticCurvePrivateKey):
+                if not isinstance(
+                    ecdh_private_key, ec.EllipticCurvePrivateKey
+                ):
                     raise TypeError(
                         "ECDH-ES with EC requires an EllipticCurvePrivateKey."
                     )
@@ -454,7 +492,9 @@ class JweCrypto:
             try:
                 pt = zlib.decompress(pt)
             except Exception as exc:  # noqa: BLE001
-                raise ValueError(f"Failed to decompress (zip=DEF): {exc}") from exc
+                raise ValueError(
+                    f"Failed to decompress (zip=DEF): {exc}"
+                ) from exc
 
         return JweDecryptResult(header=header, plaintext=pt)