tba-concrete-claim-confirmation 0.4.0.dev2__tar.gz

tba_concrete_claim_confirmation-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,13 @@
+Metadata-Version: 2.4
+Name: tba-concrete-claim-confirmation
+Version: 0.4.0.dev2
+Summary: 
+Requires-Python: >=3.10,<3.15
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-bases-claim (==0.4.0.dev2)
+Requires-Dist: tba-primitives-identity (==0.4.0.dev2)

tba_concrete_claim_confirmation-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,10 @@
+[project]
+name="tba-concrete-claim-confirmation"
+version="0.4.0.dev2"
+requires-python=">=3.10,<3.15"
+dependencies=["tba-primitives-identity==0.4.0.dev2","tba-bases-claim==0.4.0.dev2"]
+[build-system]
+requires=["poetry-core>=1.0.0"]
+build-backend="poetry.core.masonry.api"
+[tool.poetry]
+packages=[{include="tba_concrete_claim_confirmation",from="src"}]

tba_concrete_claim_confirmation-0.4.0.dev2/src/tba_concrete_claim_confirmation/__init__.py

@@ -0,0 +1,32 @@
+"""Standalone JOSE confirmation claim."""
+
+from tba_bases_claim import ClaimBase
+from tba_primitives_identity import ClaimType, ClaimValueType
+
+
+class ConfirmationClaim(ClaimBase):
+    claim_name = "cnf"
+    default_claim_type = ClaimType.AUTHORIZATION
+    default_value_type = ClaimValueType.JSON_OBJECT
+    default_standards = ("RFC7800", "RFC8705", "RFC9449")
+
+    @classmethod
+    def validate_value(cls, value):
+        if not isinstance(value, dict) or len(value) != 1:
+            raise ValueError("cnf requires exactly one confirmation member")
+
+        method, confirmation = next(iter(value.items()))
+        if method == "jwk":
+            if not isinstance(confirmation, dict) or not confirmation.get("kty"):
+                raise ValueError("cnf.jwk requires a public JWK object")
+            if "d" in confirmation:
+                raise ValueError("cnf.jwk must not contain private key material")
+            return
+        if method in {"jkt", "x5t#S256"}:
+            if not isinstance(confirmation, str) or not confirmation:
+                raise ValueError(f"cnf.{method} requires a non-empty thumbprint")
+            return
+        raise ValueError("unsupported JWT confirmation method")
+
+
+__all__ = ["ConfirmationClaim"]