|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /lib64/python2.7/site-packages/django/contrib/auth/ |
Upload File : |
�
r�\c @ sP d d l m Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m
Z
d d l m Z d d l
m Z d d l m Z m Z m Z d d l m Z d d
l m Z m Z m Z d d l m Z d d l m Z d
Z d Z d a! d a" e e
� d � � Z# d � Z$ d d d � Z% d d d � Z& d d � Z' d d � Z( d � Z) d d d � Z* d e+ f d � � YZ, d e, f d � � YZ- d e- f d � � YZ. d e, f d! � � YZ/ d" e/ f d# � � YZ0 d$ e, f d% � � YZ1 d& e, f d' � � YZ2 d( e, f d) � � YZ3 d* e, f d+ � � YZ4 d, e, f d- � � YZ5 d S(. i����( t unicode_literalsN( t receiver( t settings( t setting_changed( t importlib( t
SortedDict( t force_bytest force_strt
force_text( t ImproperlyConfigured( t pbkdf2t constant_time_comparet get_random_string( t import_by_path( t
ugettext_noopu !i( c K s# | d d k r d a d a n d S( Nu settingu PASSWORD_HASHERS( t Nonet HASHERSt PREFERRED_HASHER( t kwargs( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt
reset_hashers s c C sF | d k s | j t � r t Sy t | � Wn t k
rA t SXt S( N( R t
startswitht UNUSABLE_PASSWORD_PREFIXt Falset identify_hashert
ValueErrort True( t encoded( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt is_password_usable" s
u defaultc C s� | d k s t | � r t St | � } t | � } | j | j k } | s_ | j | � } n | j | | � } | r� | r� | r� | | � n | S( u�
Returns a boolean of whether the raw password matches the three
part encoded digest.
If setter is specified, it'll be called when you need to
regenerate the password.
N( R R R t
get_hasherR t algorithmt must_updatet verify( t passwordR t settert preferredt hasherR t
is_correct( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt check_password, s
c C sK | d k r t t t � St | � } | s; | j � } n | j | | � S( u�
Turn a plain-text password into a hash for database storage
Same as encode() but generates a new random salt.
If password is None then a concatenation of
UNUSABLE_PASSWORD_PREFIX and a random string will be returned
which disallows logins. Additional random string reduces chances
of gaining access to staff or superuser accounts.
See ticket #20079 for more info.
N( R R R t UNUSABLE_PASSWORD_SUFFIX_LENGTHR t saltt encode( R R' R# ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt
make_passwordC s c C s� g } | s t j } n xL | D]D } t | � � } t | d � sV t d | � � n | j | � q Wt g | D] } | j | f ^ qq � a | d a d S( Nu algorithmu, hasher doesn't specify an algorithm name: %si (
R t PASSWORD_HASHERSR
t getattrR t appendt dictR R R ( t password_hasherst hasherst backendR# ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt load_hashersX s
(c C sz t | d � r | S| d k r9 t d k r5 t � n t St d k rO t � n | t k rn t d | � � n t | Sd S( u�
Returns an instance of a loaded password hasher.
If algorithm is 'default', the default hasher will be returned.
This function will also lazy import hashers specified in your
settings file if needed.
u algorithmu defaultu\ Unknown password hashing algorithm '%s'. Did you specify it in the PASSWORD_HASHERS setting?N( t hasattrR R R1 R R ( R ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR h s
c C s� t | � d k r d | k s? t | � d k rH | j d � rH d } n@ t | � d k rr | j d � rr d } n | j d d � d
} t | � S( u�
Returns an instance of a loaded password hasher.
Identifies hasher algorithm by examining encoded hash, and calls
get_hasher() to return hasher. Raises ValueError if
algorithm cannot be identified, or if hasher is not loaded.
i u $i% u md5$$u unsalted_md5i. u sha1$$u
unsalted_sha1i i ( t lenR t splitR ( R R ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s
! ! i u *c C s& | | } | | t | | � 7} | S( u�
Returns the given hash, with only the first ``show`` number shown. The
rest are masked with ``char`` for security reasons.
( R3 ( t hasht showt chart masked( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt mask_hash� s
t BasePasswordHasherc B sP e Z d Z d Z d Z d � Z d � Z d � Z d � Z d � Z
d � Z RS( u�
Abstract base class for password hashers
When creating your own hasher, you need to override algorithm,
verify(), encode() and safe_summary().
PasswordHasher objects are immutable.
c C s� | j d k r� t | j t t f � r9 | j \ } } n
| j } } y t j | � } Wn/ t k
r� } t d | j j
| f � � n X| St d | j j
� � d S( Nu& Couldn't load %r algorithm library: %su- Hasher %r doesn't specify a library attribute( t libraryR t
isinstancet tuplet listR t
import_modulet ImportErrorR t __class__t __name__( t selft namet mod_patht modulet e( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt
_load_library� s
c C s t � S( uJ
Generates a cryptographically secure nonce salt in ascii
( R ( RC ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR' � s c C s
t � � d S( u9
Checks if the given password is correct
N( t NotImplementedError( RC R R ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s c C s
t � � d S( u�
Creates an encoded database value
The result is normally formatted as "algorithm$salt$hash" and
must be fewer than 128 characters.
N( RI ( RC R R' ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( � s c C s
t � � d S( u�
Returns a summary of safe values
The result is a dictionary and will be used where the password field
must be displayed to construct a safe representation of the password.
N( RI ( RC R ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt safe_summary� s c C s t S( N( R ( RC R ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s N( RB t
__module__t __doc__R R R; RH R' R R( RJ R ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR: � s t PBKDF2PasswordHasherc B sJ e Z d Z d Z d Z e j Z d d � Z d � Z
d � Z d � Z RS( u
Secure password hashing using the PBKDF2 algorithm (recommended)
Configured to use PBKDF2 + HMAC + SHA256 with 12000 iterations.
The result is a 64 byte binary string. Iterations may be changed
safely but you must rename the algorithm if you change SHA256.
u
pbkdf2_sha256i�. c C s� | d k s t � | r$ d | k s* t � | s< | j } n t | | | d | j �} t j | � j d � j � } d | j | | | f S( Nu $t digestu asciiu %s$%d$%s$%s(
R t AssertionErrort
iterationsR
RN t base64t b64encodet decodet stripR ( RC R R' RP R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( � s c C s[ | j d d � \ } } } } | | j k s3 t � | j | | t | � � } t | | � S( Nu $i ( R4 R RO R( t intR ( RC R R R RP R' R5 t encoded_2( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s c C s� | j d d � \ } } } } | | j k s3 t � t t d � | f t d � | f t d � t | � f t d � t | � f g � S( Nu $i u algorithmu
iterationsu saltu hash( R4 R RO R t _R9 ( RC R R RP R' R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRJ � s c C s1 | j d d � \ } } } } t | � | j k S( Nu $i ( R4 RU RP ( RC R R RP R' R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR s N(
RB RK RL R RP t hashlibt sha256RN R R( R RJ R ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRM � s
t PBKDF2SHA1PasswordHasherc B s e Z d Z d Z e j Z RS( u�
Alternate PBKDF2 hasher which uses SHA1, the default PRF
recommended by PKCS #5. This is compatible with other
implementations of PBKDF2, such as openssl's
PKCS5_PBKDF2_HMAC_SHA1().
u pbkdf2_sha1( RB RK RL R RX t sha1RN ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRZ s t BCryptSHA256PasswordHasherc B sM e Z d Z d Z e j Z d Z d Z d � Z d � Z
d � Z d � Z RS( u&
Secure password hashing using the bcrypt algorithm (recommended)
This is considered by many to be the most secure algorithm but you
must first install the bcrypt library. Please be warned that
this library depends on native C code and might cause portability
issues.
u
bcrypt_sha256u bcrypti c C s | j � } | j | j � S( N( RH t gensaltt rounds( RC t bcrypt( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR' s c C sw | j � } | j d k rB t j | j t | � � j � � } n t | � } | j | | � } d | j t | � f S( Nu %s$%s( RH RN R t binasciit hexlifyR t hashpwR R ( RC R R' R_ t data( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( $ s ' c C s� | j d d � \ } } | | j k s- t � | j � } | j d k ro t j | j t | � � j � � } n t | � } t | � } t | j | | � � } t
| | � S( Nu $i ( R4 R RO RH RN R R` Ra R Rb R ( RC R R R Rc R_ Rb ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR 5 s ' c C s� | j d d � \ } } } } } | | j k s6 t � | d | d } } t t d � | f t d � | f t d � t | � f t d � t | � f g � S( Nu $i i u algorithmu work factoru saltu checksum( R4 R RO R RW R9 ( RC R R t emptyt algostrt work_factorRc R' t checksum( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRJ J s !( u bcryptu bcrypt(
RB RK RL R RX RY RN R; R^ R' R( R RJ ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR\ s t BCryptPasswordHasherc B s e Z d Z d Z d Z RS( u
Secure password hashing using the bcrypt algorithm
This is considered by many to be the most secure algorithm but you
must first install the bcrypt library. Please be warned that
this library depends on native C code and might cause portability
issues.
This hasher does not first hash the password which means it is subject to
the 72 character bcrypt password truncation, most use cases should prefer
the BCryptSha512PasswordHasher.
See: https://code.djangoproject.com/ticket/20138
u bcryptN( RB RK RL R R RN ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRh V s t SHA1PasswordHasherc B s/ e Z d Z d Z d � Z d � Z d � Z RS( u?
The SHA1 password hashing algorithm (not recommended)
u sha1c C s] | d k s t � | r$ d | k s* t � t j t | | � � j � } d | j | | f S( Nu $u %s$%s$%s( R RO RX R[ R t hexdigestR ( RC R R' R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( o s c C sO | j d d � \ } } } | | j k s0 t � | j | | � } t | | � S( Nu $i ( R4 R RO R( R ( RC R R R R' R5 RV ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR u s c C sy | j d d � \ } } } | | j k s0 t � t t d � | f t d � t | d d �f t d � t | � f g � S( Nu $i u algorithmu saltR6 u hash( R4 R RO R RW R9 ( RC R R R' R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRJ { s ( RB RK RL R R( R RJ ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRi i s
t MD5PasswordHasherc B s/ e Z d Z d Z d � Z d � Z d � Z RS( uE
The Salted MD5 password hashing algorithm (not recommended)
u md5c C s] | d k s t � | r$ d | k s* t � t j t | | � � j � } d | j | | f S( Nu $u %s$%s$%s( R RO RX t md5R Rj R ( RC R R' R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( � s c C sO | j d d � \ } } } | | j k s0 t � | j | | � } t | | � S( Nu $i ( R4 R RO R( R ( RC R R R R' R5 RV ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s c C sy | j d d � \ } } } | | j k s0 t � t t d � | f t d � t | d d �f t d � t | � f g � S( Nu $i u algorithmu saltR6 u hash( R4 R RO R RW R9 ( RC R R R' R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRJ � s ( RB RK RL R R( R RJ ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRk � s
t UnsaltedSHA1PasswordHasherc B s8 e Z d Z d Z d � Z d � Z d � Z d � Z RS( u8
Very insecure algorithm that you should *never* use; stores SHA1 hashes
with an empty salt.
This class is implemented because Django used to accept such password
hashes. Some older Django installs still have these values lingering
around so we need to handle and upgrade them properly.
u
unsalted_sha1c C s d S( Nu ( ( RC ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR' � s c C s5 | d k s t � t j t | � � j � } d | S( Nu u sha1$$%s( RO RX R[ R Rj ( RC R R' R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( � s c C s | j | d � } t | | � S( Nu ( R( R ( RC R R RV ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s c C sP | j d � s t � | d } t t d � | j f t d � t | � f g � S( Nu sha1$$i u algorithmu hash( R RO R RW R R9 ( RC R R5 ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRJ � s
( RB RK RL R R' R( R RJ ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRm � s t UnsaltedMD5PasswordHasherc B s8 e Z d Z d Z d � Z d � Z d � Z d � Z RS( u�
Incredibly insecure algorithm that you should *never* use; stores unsalted
MD5 hashes without the algorithm prefix, also accepts MD5 hashes with an
empty salt.
This class is implemented because Django used to store passwords this way
and to accept such password hashes. Some older Django installs still have
these values lingering around so we need to handle and upgrade them
properly.
u unsalted_md5c C s d S( Nu ( ( RC ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR' � s c C s+ | d k s t � t j t | � � j � S( Nu ( RO RX Rl R Rj ( RC R R' ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( � s c C sM t | � d k r. | j d � r. | d } n | j | d � } t | | � S( Ni% u md5$$i u ( R3 R R( R ( RC R R RV ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s !
c C s7 t t d � | j f t d � t | d d �f g � S( Nu algorithmu hashR6 i ( R RW R R9 ( RC R ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRJ � s ( RB RK RL R R' R( R RJ ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRn � s
t CryptPasswordHasherc B s> e Z d Z d Z d Z d � Z d � Z d � Z d � Z RS( uv
Password hashing using UNIX crypt (not recommended)
The crypt module is not supported on all platforms.
u cryptc C s
t d � S( Ni ( R ( RC ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR' � s c C sP | j � } t | � d k s$ t � | j t | � | � } d | j d | f S( Ni u %s$%s$%su ( RH R3 RO t cryptR R ( RC R R' Rp Rc ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR( � s c C s[ | j � } | j d d � \ } } } | | j k s< t � t | | j t | � | � � S( Nu $i ( RH R4 R RO R Rp R ( RC R R Rp R R' Rc ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyR � s c C ss | j d d � \ } } } | | j k s0 t � t t d � | f t d � | f t d � t | d d �f g � S( Nu $i u algorithmu saltu hashR6 i ( R4 R RO R RW R9 ( RC R R R' Rc ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRJ � s ( RB RK RL R R; R' R( R RJ ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyRo � s (6 t
__future__R RQ R` RX t django.dispatchR t django.confR t django.test.signalsR t django.utilsR t django.utils.datastructuresR t django.utils.encodingR R R t django.core.exceptionsR t django.utils.cryptoR
R R t django.utils.module_loadingR
t django.utils.translationR RW R R& R R R R R R% R) R1 R R R9 t objectR: RM RZ R\ Rh Ri Rk Rm Rn Ro ( ( ( s= /tmp/pip-install-XxeQeY/django/django/contrib/auth/hashers.pyt <module> sF
=* D !