j\"dZddlZddlmZddlmZmZmZddlm Z m Z m Z m Z m Z ddlmZddlmZddlmZdd lmZdd lmZdd lmZmZdd lmZdd lmZmZm Z m!Z!m"Z"ddl#m$Z$ddl%m&Z&ddl'm(Z(m)Z)ddl*m+Z+ddl,m-Z-ddl.m/Z/gdZ0ej1e2Z3GddeZ4GddZ5GddeZ6GddeZ7GddZ8dd d!d"d#d$d%d&Z9d'e9:DZ;dTd)ej<fd*Z=ed+,Gd-d.Z>eGd/d0eZ?eGd1d2eZ@eGd3d4eZAeGd5d6eZBed+,Gd7d8ZCGd9d:eZDed+,Gd;d<ZEed+,Gd=d>ZFed+,Gd?d@ZGed+,GdAdBZH dUdCe&fdDZIdVdCe&dEeJfdFZK dTdGe&fdHZL dWdIe$dJe eJdKe eMfdLZNdMe&dNeHfdOZOdMe&dPejPdNeHfdQZQGdRdSejPZRdS)XzQ Utilities to deal with signature form fields and their properties in PDF files. N) dataclass)EnumFlagunique)ListOptionalSetTupleUnion)x509)KeyUsage)generic) RawContent)enumerate_fields_inpdf_name pdf_string)BoxConstraints) OrderedEnum PdfReadError PdfWriteError get_and_applyrd) PdfHandler)BasePdfFileWriter) SigningErrorUnacceptableSignerError)AuthorityWithCert)InvalidCertificateError)ValidationPath)FieldMDPAction FieldMDPSpecInvisSigSettingsMDPPermSeedLockDocumentSeedValueDictVersionSigCertConstraintFlagsSigCertConstraintsSigCertKeyUsage SigFieldSpecSigSeedSubFilterSigSeedValFlagsSigSeedValueSpecSignatureFormFieldVisibleSigSettingsappend_signature_fieldapply_sig_field_spec_propertiesensure_sig_flagsenumerate_sig_fieldsprepare_sig_fieldc"eZdZdZdZ dZ dZdS)r$zL Indicates a ``/DocMDP`` level. Cf. Table 254 in ISO 32000-1. N)__name__ __module__ __qualname____doc__ NO_CHANGES FILL_FORMSANNOTATEb/var/www/finuniver-perm.ru/html/portfolio/venv/lib/python3.11/site-packages/pyhanko/sign/fields.pyr$r$=s= JJHrAr$c>eZdZdZddeefdZdZdefdZ dS) SeedSignatureTypea+ Signature type indicator to be embedded into the seed value dictionary attached to a signature field. :param mdp_perm: If not ``None``, indicates that the signature field is intended for a certification signature. The :class:`MDPPerm` value passed as the ``mdp_perm`` parameter indicates the modification policy that the certification signature should use. A value of ``None`` indicates that the signature field is intended for an approval signature (i.e. a non-certification signature). Nmdp_permc||_dSNrE)selfrEs rB__init__zSeedSignatureType.__init__js   rAcLt|to|j|jkSrG) isinstancerDrErIothers rB__eq__zSeedSignatureType.__eq__ms& u/ 0 0 0$-/ rAreturnc|jduSrGrHrIs rBcertification_signaturez)SeedSignatureType.certification_signaturess}D((rArG) r9r:r;r<rr$rJrOboolrSr@rArBrDrD[sm  !!'!2!!!!   )))))))rArDcFeZdZdZdZ dZ dZ dZ dZ dZ dZ d Z d Z d S) r,a Flags for the ``/Ff`` entry in the seed value dictionary for a signature field. These mark which of the constraints are to be strictly enforced, as opposed to optional ones. .. warning:: The flags :attr:`LEGAL_ATTESTATION` and :attr:`APPEARANCE_FILTER` are processed in accordance with the specification when creating a signature, but support is nevertheless limited. * PyHanko does not support legal attestations at all, so given that the :attr:`LEGAL_ATTESTATION` requirement flag only restricts the legal attestations that can be used by the signer, pyHanko can safely ignore it when signing. On the other hand, since the validator is not aware of legal attestations either, it cannot validate signatures that make :attr:`~.SigSeedValueSpec.legal_attestations` a mandatory constraint. * Since pyHanko does not define any named appearances, setting the :attr:`APPEARANCE_FILTER` flag and the :attr:`~.SigSeedValueSpec.appearance` entry in the seed value dictionary will make pyHanko refuse to sign the document. When validating, the situation is different: since pyHanko has no way of knowing whether the signer used the named appearance imposed by the seed value dictionary, it will simply emit a warning and continue validating the signature. r6r7 @N) r9r:r;r<FILTER SUBFILTERVREASONSLEGAL_ATTESTATION ADD_REV_INFO DIGEST_METHOD LOCK_DOCUMENTAPPEARANCE_FILTERr@rArBr,r,ws<F I AGLMMrAr,cFeZdZdZdZ dZ dZ dZ dZ dZ dZ eezZ d S) r'a^ Flags for the ``/Ff`` entry in the certificate seed value dictionary for a dictionary field. These mark which of the constraints are to be strictly enforced, as opposed to optional ones. .. warning:: While this enum records values for all flags, not all corresponding constraint types have been implemented yet. r6r7rVrWrXrYrZN) r9r:r;r<SUBJECTISSUEROID SUBJECT_DNRESERVED KEY_USAGEURL UNSUPPORTEDr@rArBr'r's}GF CJHI CS.KrAr'ceZdZdZ d deedeefdZdZedZ e d dee e dee e fdZ d e e fd Z d e e fd Zd ZdS)r)u Encodes the key usage bits that must (resp. must not) be active on the signer's certificate. .. note:: See § 4.2.1.3 in :rfc:`5280` and :class:`.KeyUsage` for more information on key usage extensions. .. note:: The human-readable names of the key usage extensions are recorded in ``camelCase`` in :rfc:`5280`, but this class uses the naming convention of :class:`.KeyUsage` in ``asn1crypto``. The conversion is done by replacing ``camelCase`` with ``snake_case``. For example, ``nonRepudiation`` becomes ``non_repudiation``, and ``digitalSignature`` turns into ``digital_signature``. .. note:: This class is intended to closely replicate the definition of the KeyUsage entry Table 235 in ISO 32000-1. In particular, it does *not* provide a mechanism to deal with extended key usage extensions (cf. § 4.2.1.12 in :rfc:`5280`). :param must_have: The :class:`.KeyUsage` object encoding the key usage extensions that must be present on the signer's certificate. :param forbidden: The :class:`.KeyUsage` object encoding the key usage extensions that must *not* be present on the signer's certificate. N must_have forbiddenc||ntt|_||ntt|_dSrG)r setrprq)rIrprqs rBrJzSigCertKeyUsage.__init__s< '0&;#%%&/&;#%%rAc|dtffd dfdtdDS)z Encode the key usage requirements in the format specified in the PDF specification. :return: A string. bitcDj|rdSj|rdSdS)N10Xrprq)rurIs rBfmt_bitz4SigCertKeyUsage.encode_to_sv_string..fmt_bit-s0~c" s$ ssrAc3.K|]}|VdSrGr@).0rur{s rB z6SigCertKeyUsage.encode_to_sv_string..5s+88wws||888888rA )intjoinrange)rIr{s`@rBencode_to_sv_stringz#SigCertKeyUsage.encode_to_sv_string$sX       ww8888uQxx888888rAcddfd}tt|dt|dS)a Parse a PDF KeyUsage string into an instance of :class:`.SigCertKeyUsage`. See Table 235 in ISO 32000-1. :param ku_str: A PDF KeyUsage string. :return: An instance of :class:`.SigCertKeyUsage`. Nrc<tfdDS)Nc3,K|]}|krdndVdS)r6rNr@)r~valwith_vals rBrzISigCertKeyUsage.read_from_sv_string.._as_tuple..Es/GGcXoo1GGGGGGrA)tuple)rku_strs`rB _as_tuplez6SigCertKeyUsage.read_from_sv_string.._as_tupleDs'GGGGGGGGG GrArwrxrz)r)r )clsrrs ` rBread_from_sv_stringz#SigCertKeyUsage.read_from_sv_string7so H H H H Hyy~~..yy~~..    rActt|tn|t|tn|S)a Initialise a :class:`.SigCertKeyUsage` object from two sets. :param must_have: The key usage extensions that must be present on the signer's certificate. :param forbidden: The key usage extensions that must *not* be present on the signer's certificate. :return: A :class:`.SigCertKeyUsage` object encoding these. Nrz)r)r rs)rrprqs rB from_setszSigCertKeyUsage.from_setsLsK$ (9suuuyII (9suuuyII    rArPc|jjS)zr Return the set of key usage extensions that must be present on the signer's certificate. )rpnativerRs rB must_have_setzSigCertKeyUsage.must_have_setc ~$$rAc|jjS)zv Return the set of key usage extensions that must not be present on the signer's certificate. )rqrrRs rB forbidden_setzSigCertKeyUsage.forbidden_setjrrAct|toS||ko)||kSrG)rLr)rrrMs rBrOzSigCertKeyUsage.__eq__qs^ uo . . >""$$(;(;(=(== >""$$(;(;(=(== rANN)r9r:r;r<rr rJr classmethodrr strrrrrOr@rArBr)r)s+@)-(,QQH%QH%QQQQ999&  [ ()-(,  CH% CH%   [ ,%s3x%%%%%s3x%%%%     rAr)CN SerialNumberCLSTOOU)z2.5.4.3z2.5.4.5z2.5.4.6z2.5.4.7z2.5.4.8z2.5.4.10z2.5.4.11ci|]\}}|| Sr@r@)r~kvs rB rsDDD$!QADDDrAFnamec#K|j}|D]F}|D]A}|d}|d}|j}|rt||}||jfVBGdS)Ntypevalue)chosendottedname_type_abbrevsgetr)rabbreviate_oidsrdnsrdntype_and_valueoidrkeys rBx509_name_keyval_pairsrs![D $ $! $ $N!/!7C#7+E*C 6'++C55u|# # # # # $ $ $rAT)frozencreZdZUdZedZeed< dZee e j ed< dZ ee j ed< dZee e j ed< dZeeed< ed Zejed < dZee eed < ed Zd Zde j deefdZdS)r(z This part of the seed value dictionary allows the document author to set constraints on the signer's certificate. See Table 235 in ISO 32000-1. rflagsNsubjects subject_dnissuersinfo_urlz/Browserurl_type key_usagec t|tjr|} |ddkrt dn#t $rYnwxYwt |dd}d|ddD}d |d dD}d tj fd |d dD}d}t|d|}|d}|d} ||pd|pd|pd||d} || | | d<|di| S)z Read a PDF dictionary into a :class:`.SigCertConstraints` object. :param pdf_dict: A :class:`~.generic.DictionaryObject`. :return: A :class:`.SigCertConstraints` object. /Type/SVCertz!Object /Type entry is not /SVCert/FfrcVg|]&}tj|j'Sr@r Certificateloadoriginal_bytesr~certs rB z6SigCertConstraints.from_pdf_object..s<      ! !$"5 6 6   rA/Subjectr@cVg|]&}tj|j'Sr@rrs rBrz6SigCertConstraints.from_pdf_object..s<      ! !$"5 6 6   rA/Issuercp|dd}t||S)Nr6)name_type_abbrevs_revrupper)attrs rB format_attrz7SigCertConstraints.from_pdf_object..format_attrs/8D),,TZZ\\4@@ @rAc\i|](}|D]\}}||)Sr@)items)r~dn_dirrrrs rBrz6SigCertConstraints.from_pdf_object..sX   #)<<>>   D% D!!5    rA /SubjectDNcd|DS)NcBg|]}t|Sr@)r)rr~kus rBrzOSigCertConstraints.from_pdf_object..parse_key_usage..s&JJJO77;;JJJrAr@rs rBparse_key_usagez;SigCertConstraints.from_pdf_object..parse_key_usagesJJcJJJ JrA /KeyUsage/URL/URLTypeN)rrrrrrr) rLrIndirectObject get_objectrKeyErrorr'rr Namebuildr) rpdf_dictrrr subject_dnsrrurlrkwargsrs @rBfrom_pdf_objectz"SigCertConstraints.from_pdf_objects h 6 7 7 -**,,H  I--"#FGGG.    D &x||E1'='=>>   Z44      Y33     A A Aioo    &ll<<<      K K K"(KII ll6""<< ++ (D%-$"    ?x3!)F: s}}V}}sA AAc Ttjtdtdtdtj|jji}|j3tjd|jD|td<|jrUtjtjdt|jd Dg|td <|j 3tjd |j D|td <|j ;t|j |td <|j |td<|j3tjd|jD|td<|S)z Render this :class:`.SigCertConstraints` object to a PDF dictionary. :return: A :class:`~.generic.DictionaryObject`. rrrNc3bK|]*}tj|V+dSrGrByteStringObjectdumprs rBrz3SigCertConstraints.as_pdf_object..sF??:>(55??????rArcTi|]%\}}td|zt|&S)/r)r~rrs rBrz4SigCertConstraints.as_pdf_object..%sB *U%S3Y//E1B1BrAT)rrc3bK|]*}tj|V+dSrGrrs rBrz3SigCertConstraints.as_pdf_object../sF>>:>(55>>>>>>rArrrc3XK|]%}t|V&dSrG)rrrs rBrz3SigCertConstraints.as_pdf_object..7sO@@9; 2113344@@@@@@rAr)rDictionaryObjectr NumberObjectrrr ArrayObjectrrrrrrrrIresults rB as_pdf_objectz SigCertConstraints.as_pdf_object s)!!8I#6#6!5dj6F!G!G    = $+2+>??BF-???,,F8J'' ( ? .5-@,.D $///  . .F8L)) * < #*1*=>>BF,>>>++F8I&& ' = $'1$-'@'@F8F## $+/=F8J'' ( > %,3,?@@?C~@@@--F8K(( ) rAsignervalidation_pathc |j}|tjzrtd|tjzr0|j)d|jD}|j|vrtd|tjzrZ|j S|tdd| D}|j D] }|j|vrntd|tj zr|j rytt|j }tt|j t! fd|Dstd |j jz|tjzr~|jyd d lm}|jD]Z} || | d |dS#t2$rYWwxYwtddSdS)a Evaluate whether a signing certificate satisfies the required constraints of this :class:`.SigCertConstraints` object. :param signer: The candidate signer's certificate. :param validation_path: Validation path of the signer's certificate. :raises UnacceptableSignerError: Raised if the conditions are not met. zRCertificate constraint flags include mandatory constraints that are not supported.Nc3$K|] }|jV dSrG) issuer_serialr~ss rBrz2SigCertConstraints.satisfied_by..Zs$AAa!/AAAAAArAz+Signer certificate not on SVCert whitelist.zValidation path not provided.cPh|]#}t|t|jj$Sr@)rLr certificater)r~ authoritys rB z2SigCertConstraints.satisfied_by..gs?   i):;; %3   rAz.s(IIt|+IIIIIIrAzASubject does not have some of the following required attributes: r6)KeyUsageConstraintsT)rkey_usage_forbiddenmatch_all_key_usageszeThe signer satisfies none of the key usage extension profiles specified in the seed value dictionary.)rr'rnNotImplementedErrorrgrrrrhriter_authoritiesrjrlistrsubjectallhuman_friendlyrlrvalidation.settingsrrrvalidater) rIrrr acceptablepath_iss_serialsissuerrequirement_listrrrs @rB satisfied_byzSigCertConstraints.satisfied_by=s$  )5 5 %*  *2 2 m'BA4=AAAJ#:55-A *1 1 t|7O&-.MNNN   !0!A!A!C!C     ,  '+;;;E<. *5 5 4?  $$:4?$K$KLL  6v~ F FGGLIIII8HIIIII -#%)_%CD *4 4 n( @ @ @ @ @ @n   ''"$"2"2"4"4,.,<,<,>,>-1  hv&&&EE.H.Q#  ((sAG  GG)r9r:r;r<r'r__annotations__rrrr rrrrrrrrr NameObjectrr)rrrr rr@rArBr(r(sk%;$:1$=$=E !===26HhtD,-.555'+J#*** 15GXd4+, -444 #Hhsm"""$,8J#7#7Hg 777 26Ix_-.555;;[;z...`\ \".1\\\\\\rAr(cTeZdZdZedZedZedZdS)r+z= Enum declaring all supported ``/SubFilter`` values. z/adbe.pkcs7.detachedz/ETSI.CAdES.detachedz /ETSI.RFC3161N)r9r:r;r<rADOBE_PKCS7_DETACHEDPADES ETSI_RFC3161r@rArBr+r+sJ$8$:;; H+ , ,E8O,,LLLrAr+cTeZdZdZedZedZedZdS) SigAuthTypezA Enum declaring all supported ``/Prop_AuthType`` values. PINPassword FingerprintN)r9r:r;r<rrPASSWORD FINGERPRINTr@rArBrrsG *U  Cz*%%H*]++KKKrArc"eZdZdZdZ dZ dZdS)r&zU Specify the minimal compliance level for a seed value dictionary processor. r6r7r8N)r9r:r;r<PDF_1_5PDF_1_7PDF_2_0r@rArBr&r&s=GGGrAr&cXeZdZdZedZ edZ edZdS)r%z Provides a recommendation to the signer as to whether the document should be locked after signing. The corresponding flag in :attr:`.SigSeedValueSpec.flags` determines whether this constraint is a required constraint. z/truez/falsez/autoN)r9r:r;r<rLOCK DO_NOT_LOCKSIGNER_DISCRETIONr@rArBr%r%s\ 8G  D(8$$K!))rAr%ceZdZUdZedZeed< dZee e ed< dZ ee ed< dZ e ed< dZeeed < dZee eed < dZee e ed < dZee ed < dZeeed < dZeeedfed< dZee e ed< dZeeed< dZee ed< dZedZ dZ!dS)r-z? Python representation of a PDF seed value dictionary. rrNreasonstimestamp_server_urlFtimestamp_requiredr subfiltersdigest_methods add_rev_infoseed_signature_typesv_dict_versionlegal_attestations lock_document appearancectj}tjt dt dt dtj|jji}|j3tj d|jD|t d<|j 5tj }tj |j |t d<|j Htj }tj tt|j |t d<|j3tj d |jD|t d <|j{tj }tjt d t|jt dtj|jrd nd i|t d<|j)|j|t d<|jZ|jj}tjt dtj||jnd i|t d<|j3tj d|jD|t d<|j(tj}|jj|t d<|j$t|j|t d<|j}|Atjt9|tr|jn||t d<n)tj|j|t d<|S)z Render this :class:`.SigSeedValueSpec` object to a PDF dictionary. :return: A :class:`~.generic.DictionaryObject`. r/SVrNc3$K|] }|jV dSrG)r)r~sfs rBrz1SigSeedValueSpec.as_pdf_object..os=AAAAAAAArA /SubFilter /AddRevInfo /DigestMethodc34K|]}t|VdSrGr)r~reasons rBrz1SigSeedValueSpec.as_pdf_object..}s;??'- 6""??????rA/Reasonsrr6r /TimeStamp/Cert/P/MDPc34K|]}t|VdSrGr>)r~atts rBrz1SigSeedValueSpec.as_pdf_object..sAHH$' 3HHHHHHrA/LegalAttestation /LockDocument/AppearanceFilter/V)r&r#rrrrrrr.rr0r$ BooleanObjectr/maprr+r,r-rrr1rEr3r4r%r5r2rL)rI min_versionrrEspecified_versions rBrzSigSeedValueSpec.as_pdf_object_so+2 )!!8E??!5dj6F!G!G    ? &-4-@AA#'?AAA..F8L)) *   (.6K.5.C!//F8M** +   *.6K070CJ 34411F8O,, - < #+2+>??15???,,F8J'' (  $ 0.6K-4-EV$$j1J&K&KUOOW%9!4;!&&..F8L)) * 9 (, (?(?(A(AF8G$$ %  # //8H'.'?TNNG$8*2*>A%%((F8F## $  " .4;4GHH+/+BHHH55F8/00 1   ).6K040B0HF8O,, - ? &4>t4O4OF8/00 1 0  (%,%9/1EFF'!''&&&F8D>> " " &-%9+:K%L%LF8D>> " rAcXt|tjr|} |ddkrt dn#t $rYnwxYwt |dd} |d}|t jzr|dkrtd|zn#t $rYnwxYw |d }tj j }|t j zr||krtd |zt|}n#t $rd }YnwxYw t|d }n#t $rd }YnwxYw|d d d }fd}t|} d|dD} n#t $rd } YnwxYwt!|dt} t!|dt} d} t!|d| } d}t!|d|}|dd }|di}|dd }t|dd}|dd }|t"|}||| |||| ||| | ||| S)z Read from a seed value dictionary. :param pdf_dict: A :class:`~.generic.DictionaryObject`. :return: A :class:`.SigSeedValueSpec` object. rr7zObject /Type entry is not /SVrrz/Filterz/Adobe.PPKLitezVSignature handler '%s' is not available, only the default /Adobe.PPKLite is supported.rJz/Seed value dictionary version %s not supported.Nr;r:c3ZKD]$} t|V#t$rY!wxYwdSrG)r+ ValueError)rsubfilter_reqss rB _subfiltersz5SigSeedValueSpec.from_pdf_object.._subfilterss\'A.q111111%s  ((c6g|]}|Sr@)lowerrs rBrz4SigSeedValueSpec.from_pdf_object..s KKKAaggiiKKKrAr<r@rGc |d}t|dkrdnt|S#tttf$rt d|dwxYw)NrCrz /MDP entry z5 in seed value dictionary is not correctly formatted.)rDr$r TypeErrorrQr)mdprs rB read_mdp_dictz7SigSeedValueSpec.from_pdf_object..read_mdp_dictsz $i(ws||LLLi4   "+#+++ s +.+ArDcd t|S#t$rtd|dwxYw)Nz/LockDocument entry 'z ' is invalid.)r%rQrrs rBread_lock_documentz.read_lock_documentsO O',,, O O O"#M3#M#M#MNNN Os/rHrIrArrB) rr+r,rr.r/r0r-r3r1r2r4r5)rLrrrrrr,rr]rr&r%rr_rTr rr(r)rrr sig_filterrM supportedr0r.rSr/r+r3rYsignature_typer[r4appearance_filtertimestamp_dictr,r-cert_constraintsrRs @rBrz SigSeedValueSpec.from_pdf_objects h 6 7 7 -**,,H  E))"#BCCC*    D   UA 6 677 !),J.. ...";=GH    D  "4.K,4:I(( [9-D-D"E!"/{;;KK   KKK   788LL   LLL "lD99  %     kkmm,,J "KK/1JKKKNN " " "!NNN " *d;;*85H$OO   'xGG O O O & o'9  %LL)">??#<<66  '1AA    s!5!!)%11 .''(    sZA AA/B11 B>=B>AD D! D!%D;; E  E F F&%F&c@ddlm}|jr||jSdS)z Return a timestamper object based on the :attr:`timestamp_server_url` attribute of this :class:`.SigSeedValueSpec` object. :return: A :class:`~.pyhanko.sign.timestamps.HTTPTimeStamper`. r)HTTPTimeStamperN)pyhanko.sign.timestampsrcr,)rIrcs rBbuild_timestamperz"SigSeedValueSpec.build_timestampers> <;;;;;  $ >"?4#<== = > >rA)"r9r:r;r<r,rrr+rrrr,r-rTrr(r.r+r/r0r1rDr2r r&rr3r4r%r5rrrrer@rArBr-r-s-_Q//E?///$(GXd3i '''+/(3-... %$$$ *.D(% &---48J./0777+/NHT#Y'...$(L(4.''' 8<"34;;; ?COU/d:;BBB/3c+222&15M8,-444!%J $$$ IIIVp p [p d > > > > >rAr-cXeZdZdZedZ edZ edZdS)r!z9 Marker for the scope of a ``/FieldMDP`` policy. z/Allz/Includez/ExcludeN)r9r:r;r<rALLINCLUDEEXCLUDEr@rArBr!r!+s[ (6  Chz""Ghz""GrAr!ceZdZUdZeed< dZeee ed< de j fdZ de j fdZ de j fdZed d Zd e defd ZdS) r"z``/FieldMDP`` policy description. This class models both field lock dictionaries and ``/FieldMDP`` transformation parameters. actionNfieldsrPctjtd|jji}|jt jkr1tjtt|j pd|d<|S)z Render this ``/FieldMDP`` policy description as a PDF dictionary. :return: A :class:`~.generic.DictionaryObject`. /Actionr@/Fields) rrrrkrr!rgrrLrrlrs rBrzFieldMDPSpec.as_pdf_objectTsq)##T[%6    ;., , , ' 3J 1r22!!F9  rAcv|}td|d<td|d<|S)a" Render this ``/FieldMDP`` policy description as a PDF dictionary, ready for inclusion into the ``/TransformParams`` entry of a ``/FieldMDP`` dictionary associated with a signature object. :return: A :class:`~.generic.DictionaryObject`. z/TransformParamsrz/1.2rJrrrs rBas_transform_paramsz FieldMDPSpec.as_transform_paramsfs=##%%"#566w''t  rAcR|}td|d<|S)z Render this ``/FieldMDP`` policy description as a PDF dictionary, ready for inclusion into the ``/Lock`` dictionary of a signature field. :return: A :class:`~.generic.DictionaryObject`. z /SigFieldLockrrqrs rBas_sig_field_lockzFieldMDPSpec.as_sig_field_lockus+##%%"?33w rAc t|d}n#t$rtdwxYw|tjkr' |d}n#t$rtdwxYwd}|||S)z Read a PDF dictionary into a :class:`.FieldMDPSpec` object. :param pdf_dict: A :class:`~.generic.DictionaryObject`. :return: A :class:`.FieldMDPSpec` object. rnz/Action is required.roz,/Fields is required when /Action is not /AllN)rkrl)r!rrrg)rrrkrls rBrzFieldMDPSpec.from_pdf_objects 7#HY$788FF 7 7 7566 6 7 ^' ' ' !),   "B  Fs&0000s2AA) field_namec|jtjkrdS|jtjk}|jpdD]$}||dzs||kr|cS%| S)a  Adjudicate whether a field should be locked by the policy described by this :class:`.FieldMDPSpec` object. :param field_name: The name of a form field. :return: ``True`` if the field should be locked, ``False`` otherwise. Tr@.)rkr!rgrhrl startswith)rIrv lock_resultscoped_field_names rB is_lockedzFieldMDPSpec.is_lockeds ;., , ,4k^%;; !%!2 # # %%&7#&=>> #!222""""3rA)rPr")r9r:r;r<r!rrlrrrrrrrrrtrrrTr|r@rArBr"r"As #'FHT#Y &&& w7$ W%=     7#;    111[12CDrAr"cBeZdZUdZdZeed< dZeed< dZeed<dS)r#a Invisible signature widget generation settings. These settings exist because there is no real way of including an untagged invisible signature in a document that complies with the requirements of both PDF/A-2 (or -3) and PDF/UA-1. Compatibility with PDF/A (the default) requires the print flag to be set. Compatibility with PDF/UA requires the hidden flag to be set (which is banned in PDF/A) or the box to be outside the crop box. Tset_print_flagFset_hidden_flagbox_out_of_boundsN) r9r:r;r<r~rTrrrr@rArBr#r#sa   ND"OT!!!$t###rAr#cBeZdZUdZdZeed< dZeed< dZeed<dS)r/zh .. versionadded:: 0.14.0 Additional flags used when setting up visible signature widgets. Trotate_with_pagescale_with_page_zoomprint_signatureN) r9r:r;r<rrTrrrr@rArBr/r/sb "d!!!"&$%%%!OT   rAr/cReZdZUdZeed< dZeed< dZe e eeeefed< dZ e e ed< dZ e eed< dZe eed < d Zeed < d Zeed < eZeed< dZe eed< eZeed< de ejfdZdS)r*z/Description of a signature field to be created.sig_field_nameron_pageNboxseed_value_dictfield_mdp_specdoc_mdp_update_valueTcombine_annotationFempty_field_appearanceinvis_sig_settingsreadable_field_namevisible_sig_settingsrPc|jdS|j}|j!tj|jj|d<|S)NrC)rrtrrrrrs rBformat_lock_dictionaryz#SigFieldSpec.format_lock_dictionary[sN   &4$6688  $ 0"/0I0OPPF4L rA)r9r:r;r<rrrrrrr rr-rr"rr$rrTrr#rrr/rrrrr@rArBr*r*sx99GS 04C%S#s*+ ,33337OX./666.2NH\*111/3(7+222  $### $)D((( ,<+;+=+=(===*.#---0B/A/C/C,CCC1I(JrAr*writercx|d|dd}}|D]N}t|tjsJ|} | dd|krnuO||s|} ntj} t || d<||| d<|| }||| |d}|s||fS | d} n?#t$r2tj x} | d<| | d}YnwxYwt|| ||||S)Nrr6/Tz/ParentT/Kids) parent_refmodified field_obj) rLrrrrrr add_objectappendupdate_containerrr_insert_or_get_field_at) rrlpathrrrcurrent_partialtail field_reffieldkidss rBrrfs!GT!""XTO )W%;<<<<<$$&& 99T4 O 3 3 E 4   EE,..E 11d  !)E) %%e,,  i   ''' #""W~  ' 3 5 55uW~&&& #      sC((9D$#D$lock_sig_flagsc<|jd}|rW|dd}tjd|d<d|v}|r|d=|dks|r||dSdS|t dtjddS)a Ensure the SigFlags setting is present in the AcroForm dictionary, and the /NeedAppearances setting is cleared if necessary. :param writer: A PDF writer. :param lock_sig_flags: Whether to flag the document as append-only. /AcroFormz /SigFlagsNr8z/NeedAppearancesr6)rootrrrr setdefaultr)rrformorig_sig_flagshas_need_appearancess rBr2r2s ;{ #D H+t44#033[1T9  )'( Q  "6   # #D ) ) ) ) )   --w/CA/F/FGGGGGrA update_writerc  |d} |d}n(#t$rtjx}|d<YnwxYwt||t d}d} t |\} } }| t d|zn$#t$r|rt d|zYnwxYwd} n#t$r|rt d tj}| ||td<tj}||td<| d } d}YnwxYw|d|fS| d d } d | i} | j di|t|fi| }t|||d |\}}|||| s||d |fS)z Returns a tuple of a boolean and a reference to a signature field. The boolean is ``True`` if the field was created, and ``False`` otherwise. .. danger:: This function is internal API. rro/Sig) with_name refs_seentarget_field_typeNz:Signature field with name %s appears to be filled already.z,No empty signature field with name %s found.Fz"This file does not contain a form.Trinclude_on_pagerx)rrr@)rrrrrsnextr StopIterationrrr update_rootfind_page_for_modificationupdater.rsplitregister_widget_annotationr)rrrexisting_fields_onlyrrrl candidates sig_field_refrvr form_createdpage_refsig_form_kwargs sig_fieldcreateds rBr4r4s)K  =)_FF = = ='.':'<'< &>t&D&DXk " "#$&&$*Xi !!!###    m##77::1=H((3OO$$V$$$">EE_EEI4  ! !# & & G] (( FFF /&&v...  sQB-B-"9B-9$B-'BB-B'$B-&B''B--BE?Ehandler filled_statusrc#K |jdd}n#t$rYdSwxYwt|||tdEd{VdS)a Enumerate signature fields. :param handler: The :class:`~.rw_common.PdfHandler` to operate on. :param filled_status: Optional boolean. If ``True`` (resp. ``False``) then all filled (resp. empty) fields are returned. If left ``None`` (the default), then all fields are returned. :param with_name: If not ``None``, only look for fields with the specified name. :return: A generator producing signature fields. rroNr)rrrr)rrrrs)rrrrls rBr3r3s(k*95 ##%% s  &&pdf_outsig_field_specc |j}||jd}t|j||d|j||j|j|j \}}t|d|std|jz| }t||||j|j\}}} } t| |z } t| |z } | r| rtjx|jt#d<} |jrVd d | | fzd | | fzd g}t'd |t+| | }n2t'dt+| | }||| t#d<dSdSdSdS)z Append signature fields to a PDF file. :param pdf_out: Incremental writer to house the objects. :param sig_field_spec: A :class:`.SigFieldSpec` object describing the signature field to add. rF)rrrrrinvis_settingsvisible_settings)rrz,Signature field with name %s already exists.)rrNz/APqs$q 0.95 0.95 0.95 rg 0 0 %g %g re f Qs0.5 w 0 0 %g %g re SQ )widthheight)rrAz/N)rrrr4rrrrrr2rrr1absrr annot_dictrrrrras_form_xobjectr)rrrr field_createdrrllxllyurxurywhap_dictappearance_cmds ap_streams rBr0r0's< >>!/##'.&8&8&C&CGHTNN # # #5&% D D D DrArcj|j)tj|j|td<|j>||j}||td<|}|'|||td<dSdS)zT Internal function to apply field spec properties to a newly created field. Nz/TUr7z/Lock)rrTextStringObjectrrrrr)rrrsv_reflocks rBr1r1js)5%,%=  .& & (5//"%1##  * 8 8 : :  &, (5//"  0 0 2 2D '.'9'9$'?'? (7##$$$rAcdeZdZdddeedddedeffdZdefdZxZS) r.NT)rrrrr annot_flagsrrc.|Jd|D}t|d|dz ot|d|dz  } n%|jrdnd} tj| gdz}d} t t d t d t d t|i||_|r|} ntj } t d | d <t d| d<|Ad}| r|j r|dz}|j r|dz}n$|j r|dz}|j s|dz}|js|dz}tj|| d<tj|| d<||_||| d<| |_dS)NcPg|]#}tjt|$Sr@)r FloatObjectr)r~xs rBrz/SignatureFormField.__init__..s)<<<1G'1..<<rsO!!!!!!##########44444444444444$$$$$$%%%%%%000000<<<<<<::::::::333333322222666666FFFFFFFF======@@@@@@555555   .  8 $ $k<))))))))8KKKKKdKKK\55555T555py y y y y y y y zED*;*A*A*C*CDDD $ $ $ $ $ $" $AAAAAAAAH-----t---,,,,,$,,,;*t6 $C>C>C>C>C>C>C>C>L T, $qqqqqqqqh $        F $D $eeeeeeeeX  00 0000fHH.HHHHH> NN%NNNNf%)# D>}D@D @D0<@D@D@D@DF@ @'@!@@@@2I=I=I=I=I=1I=I=I=I=I=rA