a ْخٍf‰م@s.ddlmmZddlZGdd„deƒZdS)éNc@sDeZdZdZdd„Zdd„Zdd„Zefdd „Zd d„Zdd „Z dS)عSecurityTokenContaineré<cCs ||_||_tj|ddچ|_dS)NF)عjwtZverify)عsecurity_tokenعsession_key_supplierrعdecode)عselfrr©r ْE/usr/lib/python3.9/site-packages/oci/auth/security_token_container.pyع__init__szSecurityTokenContainer.__init__cCs|jS©N)r©rr r r عget_jwtszSecurityTokenContainer.get_jwtcCs| d،S)Nr©ع_expired_with_jitterr r r r عvalidszSecurityTokenContainer.validcCs| |،Srr)rعjitterr r r عvalid_with_jittersz(SecurityTokenContainer.valid_with_jittercCs$|jd|jd}| |d،S)NعexpZiaté)rr)rZvalid_durationr r r عvalid_with_half_expiration_timesz6SecurityTokenContainer.valid_with_half_expiration_timecCstt ،ƒ}||jd|kS)ai Checks expiry with some jitter to account for clock skews on the client and also, for non-skewed clients, the scenario where the token was valid when we checked but became invalid before we sent a request (this should be rare). Regarding clock skew, in this context we are only worried about the scenario where the client's time is behind the server time as then tokens look like they will be valid for longer than they are and calls could fail with 401s. If the client's time is ahead of the server time that's not great but it would just lead to tokens being refreshed more often, this would not cause hard failures but could lead to higher perceived latency on the client :param int jitter: The amount of jitter, in seconds, to apply to the expiry time in the token r)عintعtimer)rrZtime_nowr r r rsz+SecurityTokenContainer._expired_with_jitterN) ع__name__ع __module__ع__qualname__ZDEFAULT_EXPIRY_JITTER_SECONDSrrrrrrr r r r r sr)Zoci._vendor.jwtZ_vendorrrعobjectrr r r r عs