tba-concrete-cwt 0.4.0.dev2__tar.gz

tba_concrete_cwt-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,19 @@
+Metadata-Version: 2.4
+Name: tba-concrete-cwt
+Version: 0.4.0.dev2
+Summary: Deterministic provider-free CWT claims-set objects.
+License-Expression: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: cbor2 (==6.1.3)
+Description-Content-Type: text/markdown
+
+# tba-concrete-cwt
+
+Deterministic RFC 8392 CWT claims-set encoding and decoding. COSE protection, trust, profile validation, and proof verification remain separate concerns.
+

tba_concrete_cwt-0.4.0.dev2/README.md

@@ -0,0 +1,3 @@
+# tba-concrete-cwt
+
+Deterministic RFC 8392 CWT claims-set encoding and decoding. COSE protection, trust, profile validation, and proof verification remain separate concerns.

tba_concrete_cwt-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,17 @@
+[project]
+name = "tba-concrete-cwt"
+version = "0.4.0.dev2"
+description = "Deterministic provider-free CWT claims-set objects."
+readme = "README.md"
+requires-python = ">=3.10,<3.15"
+license = "Apache-2.0"
+dependencies = [
+    "cbor2==6.1.3",
+]
+
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.poetry]
+packages = [{ include = "tba_concrete_cwt", from = "src" }]

tba_concrete_cwt-0.4.0.dev2/src/tba_concrete_cwt/__init__.py

@@ -0,0 +1,13 @@
+"""Deterministic RFC 8392 CWT claim-set values."""
+
+from .claims import CWT_CLAIM_LABELS, CwtClaimsSet, decode_cwt_claims
+from .tagged import CWT_TAG, decode_tagged_cwt, encode_tagged_cwt
+
+__all__ = [
+    "CWT_CLAIM_LABELS",
+    "CWT_TAG",
+    "CwtClaimsSet",
+    "decode_cwt_claims",
+    "decode_tagged_cwt",
+    "encode_tagged_cwt",
+]

tba_concrete_cwt-0.4.0.dev2/src/tba_concrete_cwt/claims.py

@@ -0,0 +1,46 @@
+"""Deterministic RFC 8392 CWT claim-set values."""
+
+from dataclasses import dataclass
+from types import MappingProxyType
+from typing import Mapping
+
+import cbor2
+
+CWT_CLAIM_LABELS = MappingProxyType(
+    {"iss": 1, "sub": 2, "aud": 3, "exp": 4, "nbf": 5, "iat": 6, "cti": 7, "cnf": 8}
+)
+
+
+@dataclass(frozen=True, slots=True)
+class CwtClaimsSet:
+    claims: Mapping[str | int, object]
+
+    def __post_init__(self) -> None:
+        normalized = dict(self.claims)
+        if not normalized:
+            raise ValueError("CWT claims set must not be empty")
+        if not all(
+            not isinstance(label, bool) and isinstance(label, (str, int))
+            for label in normalized
+        ):
+            raise ValueError("CWT claim labels must be text strings or integers")
+        object.__setattr__(self, "claims", MappingProxyType(normalized))
+
+    def get_registered(self, name: str, default: object = None) -> object:
+        label = CWT_CLAIM_LABELS[name]
+        return self.claims.get(label, self.claims.get(name, default))
+
+    def encode(self) -> bytes:
+        return cbor2.dumps(dict(self.claims), canonical=True)
+
+
+def decode_cwt_claims(encoded: bytes) -> CwtClaimsSet:
+    if not isinstance(encoded, bytes) or not encoded:
+        raise ValueError("encoded CWT claims are required")
+    try:
+        value = cbor2.loads(encoded)
+    except (ValueError, TypeError) as exc:
+        raise ValueError("invalid CBOR CWT claims set") from exc
+    if not isinstance(value, Mapping):
+        raise ValueError("CWT claims set must be a CBOR map")
+    return CwtClaimsSet(value)

tba_concrete_cwt-0.4.0.dev2/src/tba_concrete_cwt/tagged.py

@@ -0,0 +1,23 @@
+from collections.abc import Mapping
+
+import cbor2
+from .claims import CwtClaimsSet
+
+CWT_TAG = 61
+
+
+def encode_tagged_cwt(claims: CwtClaimsSet) -> bytes:
+    return cbor2.dumps(cbor2.CBORTag(CWT_TAG, dict(claims.claims)), canonical=True)
+
+
+def decode_tagged_cwt(encoded: bytes, *, require_tag: bool = True) -> CwtClaimsSet:
+    value = cbor2.loads(encoded)
+    if isinstance(value, cbor2.CBORTag):
+        if value.tag != CWT_TAG:
+            raise ValueError(f"unexpected CBOR tag: {value.tag}")
+        value = value.value
+    elif require_tag:
+        raise ValueError("CWT tag 61 is required")
+    if not isinstance(value, Mapping):
+        raise ValueError("CWT payload must be a map")
+    return CwtClaimsSet(dict(value))