|
Server : Apache System : Linux cvar2.toservers.com 3.10.0-962.3.2.lve1.5.73.el7.x86_64 #1 SMP Wed Aug 24 21:31:23 UTC 2022 x86_64 User : njnconst ( 1116) PHP Version : 8.4.18 Disable Function : NONE Directory : /lib64/python2.7/site-packages/django/contrib/auth/tests/ |
Upload File : |
�
r�\c
@ s8 d d l Z d d l Z d d l Z d d l m Z m Z d d l m Z m Z d d l m
Z
d d l m Z d d l
m Z d d l m Z m Z d d l m Z m Z d d l m Z d d
l m Z m Z m Z d d l m Z m Z d d l m Z d d
l m! Z! d d l" m# Z# d d l$ m% Z% m& Z& d d l' m( Z( d d l) m* Z* d d l+ m, Z, m- Z- d d l. m/ Z/ m0 Z0 m1 Z1 d d l2 m3 Z3 d d l4 m5 Z5 d d l6 m7 Z8 e% d d8 d d d e j9 d e j: j; e j: j< e! e= � � d � f d e> d d9 � d! e# f d" � � Y� Z? e5 d# e? f d$ � � Y� Z@ e5 d% e? f d& � � Y� ZA e% d' d( � d) e? f d* � � Y� ZB e5 d+ e? f d, � � Y� ZC e5 d- e? f d. � � Y� ZD e5 d/ e? f d0 � � Y� ZE e5 d1 e? f d2 � � Y� ZF e5 d3 e? f d4 � � Y� ZG e5 e% d d: � d5 e? f d6 � � Y� � ZH d S(; i����N( t global_settingst settings( t Sitet RequestSite( t LogEntry( t User( t mail( t reverset NoReverseMatch( t QueryDictt HttpRequest( t
force_text( t
int_to_base36t urlsafe_base64_decodet urlquote( t urlparset ParseResult( t
import_module( t upath( t TestCase( t override_settingst patch_logger( t CsrfViewMiddleware( t SessionMiddleware( t SESSION_KEYt REDIRECT_FIELD_NAME( t AuthenticationFormt PasswordChangeFormt SetPasswordForm( t
CustomUser( t skipIfCustomUser( t logint LANGUAGESt ent Englisht
LANGUAGE_CODEt TEMPLATE_LOADERSt
TEMPLATE_DIRSt templatest USE_TZt PASSWORD_HASHERSs. django.contrib.auth.hashers.SHA1PasswordHashert AuthViewsTestCasec B sG e Z d Z d g Z d Z d d � Z d � Z d � Z e d � Z RS( s:
Helper base class for all the follow test cases.
s authtestdata.jsons django.contrib.auth.tests.urlst passwordc C s@ | j j d i d d 6| d 6� } | j t | j j k � | S( Ns /login/t
testclientt usernameR* ( t clientt postt
assertTrueR t session( t selfR* t response( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR 1 s
c C sB | j j d � } | j | j d � | j t | j j k � d S( Ns /admin/logout/i� ( R- t gett assertEqualt status_codeR/ R R0 ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt logout9 s c C s? t t j | j d j j � � � } | j t | � | � d S( s= Assert that error is found in response.context['form'] errorst formN( t listt itertoolst chaint contextt errorst valuest assertInR ( R1 R2 t errort form_errors( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt assertFormError> s %c C s� t j } x� t | t | � t | � � D]r \ } } } | re | d k re t | � t | � } } n | r( | r( | | k r( | j d | | | f � q( q( Wd S( s�
Given two URLs, make sure all their components (the ones given by
urlparse) are equal, only comparing components that are present in both
URLs.
If `parse_qs` is True, then the querystrings are parsed with QueryDict.
This is useful if you don't want the order of parameters to matter.
Otherwise, the query strings are compared as-is.
t querys %r != %r (%s doesn't match)N( R t _fieldst zipR R t fail( R1 t urlt expectedt parse_qst fieldst attrt xt y( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt assertURLEqualC s . (
t __name__t
__module__t __doc__t fixturest urlsR R6 RA t FalseRM ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR) s t AuthViewNamedURLTestsc B s e Z d Z d � Z RS( s django.contrib.auth.urlsc C s� d g i f d g i f d g i f d g i f d g i f d g i f d g i d d 6d
d 6f d g i f g } xV | D]N \ } } } y t | d
| d | �Wq{ t k
r� | j d | � q{ Xq{ Wd S( s Named URLs should be reversibleR R6 t password_changet password_change_donet password_resett password_reset_donet password_reset_confirmt aaaaaaat uidb64s
1111-aaaaat tokent password_reset_completet argst kwargss5 Reversal of url named '%s' failed with NoReverseMatchN( R R RE ( R1 t expected_named_urlst nameR^ R_ ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_named_urlsY s
( RN RO RR Rb ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyRT U s t PasswordResetTestc B s e Z d � Z d � Z d � Z e d d g � d � � Z e d e � d � � Z e d e � d � � Z d � Z
d
� Z d � Z d � Z
d
� Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( c C sq | j j d � } | j | j d � | j j d i d d 6� } | j | j d � | j t t j � d � d S( se If the provided email is not registered, don't raise any error but
also don't send any email.s /password_reset/i� s not_a_real_email@email.comt emaili. i N( R- R3 R4 R5 R. t lenR t outbox( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_email_not_foundr s
c C s� | j j d i d d 6� } | j | j d � | j t t j � d � | j d t j d j k � | j t j
t j d j � d S( sE Email is sent if a valid email address is provided for password resets /password_reset/s staffmember@example.comRd i. i s http://i N( R- R. R4 R5 Re R Rf R/ t bodyR t DEFAULT_FROM_EMAILt
from_email( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_email_found{ s
c C sf | j j d i d d 6� } | j | j d � | j t t j � d � | j d t j d j � d S( sk Email is sent if a valid email address is provided for password reset when a custom from_email is provided.s /password_reset_from_email/s staffmember@example.comRd i. i i N( R- R. R4 R5 Re R Rf Rj ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_email_found_custom_from� s t
ALLOWED_HOSTSs
adminsite.comc C s� | j j d i d d 6d d �} | j | j d � | j t t j � d � | j d t j d j k � | j t j
t j d j � d
S( sc If the reset view is marked as being for admin, the HTTP_HOST header is used for a domain override.s /admin_password_reset/s staffmember@example.comRd t HTTP_HOSTs
adminsite.comi. i s http://adminsite.comi N( R- R. R4 R5 Re R Rf R/ Rh R Ri Rj ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_admin_reset� s
t DEBUG_PROPAGATE_EXCEPTIONSc C s� t d d � �k } | j j d i d d 6d d �} | j | j d � | j t t j � d � | j t | � d
� Wd QXd S( s9 Poisoned HTTP_HOST headers can't be used for reset emailss django.security.DisallowedHostR? s /password_reset/s staffmember@example.comRd Rn s$ www.example:dr.frankenstein@evil.tldi� i i N( R R- R. R4 R5 Re R Rf ( R1 t logger_callsR2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_poisoned_http_host� s
c C s� t d d � �k } | j j d i d d 6d d �} | j | j d � | j t t j � d � | j t | � d
� Wd QXd S( sH Poisoned HTTP_HOST headers can't be used for reset emails on admin viewss django.security.DisallowedHostR? s /admin_password_reset/s staffmember@example.comRd Rn s$ www.example:dr.frankenstein@evil.tldi� i i N( R R- R. R4 R5 Re R Rf ( R1 Rq R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt" test_poisoned_http_host_admin_site� s
c C sI | j j d i d d 6� } | j t t j � d � | j t j d � S( Ns /password_reset/s staffmember@example.comRd i i ( R- R. R4 Re R Rf t _read_signup_email( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt _test_confirm_start� s c C sE t j d | j � } | j | d k d � | j � | j � d f S( Ns https?://[^/]*(/.*reset/\S*)s No URL found in sent emaili ( t ret searchRh R/ t Nonet groupt groups( R1 Rd t urlmatch( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyRt � s c C s8 | j � \ } } | j j | � } | j | d � d S( Ns Please enter your new password( Ru R- R3 t assertContains( R1 RF t pathR2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_valid� s c C sz | j � \ } } | j d � j d � } t t t | d � � � | d <| j j d t | � � } | j | d � d S( Nt /i s
/%s/%s-%s/s Please enter your new password(
Ru t stript splitR t intR
R- R3 t tupleR| ( R1 RF R} t
path_partsR2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_valid_base36� s
c C sN | j � \ } } | d d | d } | j j | � } | j | d � d S( Ni����t 0i i����s# The password reset link was invalidt 0000( Ru R- R3 R| ( R1 RF R} R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_invalid� s c C s& | j j d � } | j | d � d S( Ns /reset/123456/1-1/s# The password reset link was invalid( R- R3 R| ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_invalid_user� s c C s& | j j d � } | j | d � d S( Ns /reset/123456-1-1/s# The password reset link was invalid( R- R3 R| ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_invalid_user_base36� s c C s& | j j d � } | j | d � d S( Ns /reset/zzzzzzzzzzzzz/1-1/s# The password reset link was invalid( R- R3 R| ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_overflow_user� s c C s& | j j d � } | j | d � d S( Ns /reset/zzzzzzzzzzzzz-1-1/s# The password reset link was invalid( R- R3 R| ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt! test_confirm_overflow_user_base36� s c C sy | j � \ } } | d d | d } | j j | i d d 6d d 6� t j j d d
� } | j | j d � � d S( Ni����R� i i����t anewpasswordt
new_password1s
anewpasswordt
new_password2Rd s staffmember@example.comR� ( Ru R- R. R t objectsR3 R/ t check_password( R1 RF R} t u( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_invalid_post� s c C s� | j � \ } } | j j | i d d 6d d 6� } t j j d d � } | j | j d � � | j j | � } | j | d � d S( NR� R� R� Rd s staffmember@example.coms# The password reset link was invalid( Ru R- R. R R� R3 R/ R� R| ( R1 RF R} R2 R� ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_complete� s
c C sP | j � \ } } | j j | i d d 6d d 6� } | j | t j d � d S( NR� R� RK R� t password_mismatch( Ru R- R. RA R t error_messages( R1 RF R} R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_different_passwords
s
c C sF | j j d i d d 6� } | j | j d � | j | j d � d S( Ns /password_reset/s staffmember@example.comRd i. s /password_reset/done/( R- R. R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_reset_redirect_default s c C sF | j j d i d d 6� } | j | j d � | j | j d � d S( Ns /password_reset/custom_redirect/s staffmember@example.comRd i. s /custom/( R- R. R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_reset_custom_redirect s c C sF | j j d i d d 6� } | j | j d � | j | j d � d S( Ns& /password_reset/custom_redirect/named/s staffmember@example.comRd i. s /password_reset/( R- R. R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_reset_custom_redirect_named s c C s_ | j � \ } } | j j | i d d 6d d 6� } | j | j d � | j | j d � d S( NR� R� R� i. s /reset/done/( Ru R- R. R4 R5 RM RF ( R1 RF R} R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_redirect_default" s
c C sq | j � \ } } | j d d � } | j j | i d d 6d d 6� } | j | j d � | j | j d � d S( Ns /reset/s /reset/custom/R� R� R� i. s /custom/( Ru t replaceR- R. R4 R5 RM RF ( R1 RF R} R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_redirect_custom) s
c C sq | j � \ } } | j d d � } | j j | i d d 6d d 6� } | j | j d � | j | j d � d S( Ns /reset/s /reset/custom/named/R� R� R� i. s /password_reset/( Ru R� R- R. R4 R5 RM RF ( R1 RF R} R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt" test_confirm_redirect_custom_named1 s
( RN RO Rg Rk Rl R Ro t TrueRr Rs Ru Rt R~ R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyRc o s0
t AUTH_USER_MODELs auth.CustomUsert CustomUserPasswordResetTestc B s, e Z d g Z d � Z d � Z d � Z RS( s custom_user.jsonc C s\ | j j d i d d 6� } | j | j d � | j t t j � d � | j t j d � S( Ns /password_reset/s staffmember@example.comRd i. i i ( R- R. R4 R5 Re R Rf Rt ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyRu > s c C sE t j d | j � } | j | d k d � | j � | j � d f S( Ns https?://[^/]*(/.*reset/\S*)s No URL found in sent emaili ( Rv Rw Rh R/ Rx Ry Rz ( R1 Rd R{ ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyRt E s c C s8 | j � \ } } | j j | � } | j | d � d S( Ns Please enter your new password( Ru R- R3 R| ( R1 RF R} R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_confirm_valid_custom_userJ s ( RN RO RQ Ru Rt R� ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR� : s t ChangePasswordTestc B st e Z d d � Z d � Z d � Z d � Z d � Z d � Z e d d � d � � Z d
� Z
d � Z d � Z RS(
R* c C sX | j j d i d d 6| d 6� } | j | t j d i t j j d � j d 6� d S( Ns /login/R+ R, R* t
invalid_login( R- R. RA R R� R t _metat get_fieldt verbose_name( R1 R* R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt
fail_loginT s
c C s | j j d � } d S( Ns /logout/( R- R3 ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR6 ] s c C sO | j � | j j d i d d 6d d 6d d 6� } | j | t j d � d S( Ns /password_change/t donutst old_passwordt password1R� R� t password_incorrect( R R- R. RA R R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt4 test_password_change_fails_with_invalid_old_password` s
c C sO | j � | j j d i d d 6d d 6d d 6� } | j | t j d � d S( Ns /password_change/R* R� R� R� R� R� R� ( R R- R. RA R R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt4 test_password_change_fails_with_mismatched_passwordsi s
c C sR | j � | j j d i d d 6d d 6d d 6� } | j � | j d d � d S( Ns /password_change/R* R� R� R� R� ( R R- R. R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_password_change_succeedsr s
c C s^ | j � | j j d i d d 6d d 6d d 6� } | j | j d � | j | j d � d S( Ns /password_change/R* R� R� R� R� i. s /password_change/done/( R R- R. R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt" test_password_change_done_succeeds| s
t LOGIN_URLs /login/c C s< | j j d � } | j | j d � | j | j d � d S( Ns /password_change/done/i. s# /login/?next=/password_change/done/( R- R3 R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_password_change_done_fails� s c C s^ | j � | j j d i d d 6d d 6d d 6� } | j | j d � | j | j d � d S( Ns /password_change/R* R� R� R� R� i. s /password_change/done/( R R- R. R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt% test_password_change_redirect_default� s
c C s^ | j � | j j d i d d 6d d 6d d 6� } | j | j d � | j | j d � d S( Ns /password_change/custom/R* R� R� R� R� i. s /custom/( R R- R. R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt$ test_password_change_redirect_custom� s
c C s^ | j � | j j d i d d 6d d 6d d 6� } | j | j d � | j | j d � d S( Ns /password_change/custom/named/R* R� R� R� R� i. s /password_reset/( R R- R. R4 R5 RM RF ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt* test_password_change_redirect_custom_named� s
(
RN RO R� R6 R� R� R� R� R R� R� R� R� ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR� Q s
t LoginTestc B s2 e Z d � Z d d � Z d � Z d d � Z RS( c C s� | j j t d � � } | j | j d � t j j rz t j j � } | j | j
d | � | j | j
d | j � n | j | j
d t
� | j t | j
d t � d � d S( NR i� t sitet site_nameR7 s' Login form is not an AuthenticationForm( R- R3 R R4 R5 R R� t installedR� t get_currentR; Ra t assertIsInstanceR R/ t
isinstanceR ( R1 R2 R� ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt( test_current_site_in_context_after_login� s R* c C s" t d � } x� d D]~ } d i | d
6t d 6t | � d 6} | j j | i d
d 6| d 6� } | j | j d � | j | | j k d | � q Wx� d D]~ } d i | d
6t d 6t | � d 6} | j j | i d
d 6| d 6� } | j | j d � | j | | j k d | � q� Wd S( NR s http://example.coms http:///example.coms https://example.coms ftp://exampel.coms ///example.coms
//example.coms javascript:alert("XSS")s %(url)s?%(next)s=%(bad_url)sRF t nextt bad_urlR+ R, R* i. s %s should be blockeds /view/?param=http://example.coms /view/?param=https://example.coms /view?param=ftp://exampel.coms view/?param=//example.coms https://testserver/s HTTPS://testserver/s
//testserver/s /url%20with%20spaces/s %(url)s?%(next)s=%(good_url)st good_urls %s should be allowed( s http://example.coms http:///example.coms https://example.coms ftp://exampel.coms ///example.coms
//example.coms javascript:alert("XSS")( s /view/?param=http://example.coms /view/?param=https://example.coms /view?param=ftp://exampel.coms view/?param=//example.coms https://testserver/s HTTPS://testserver/s
//testserver/s /url%20with%20spaces/(
R R R R- R. R4 R5 t assertFalseRF R/ ( R1 R* t login_urlR� t nasty_urlR2 R� t safe_url( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_security_check� sH
c C s- | j j d i d d 6d d 6d t �} d S( Ns /custom_requestauth_login/R+ R, R* t follow( R- R. R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_login_form_contains_request� s
c C sV t � } t � j | t d i � t | j d <t | � } t � j | | � } | j j t j
d � } | j } t � } | | j
t j
<d | _ i d d 6| d 6| d 6| _ | j | _ t � j | � t � j | t d
i � d | j d <d | j d
<t | � } t � j | | � } | j j t j
d � } | j } | j | | � d S( sP
Makes sure that a login rotates the currently-used CSRF token.
t CSRF_COOKIE_USEDt POSTR+ R, R* t csrfmiddlewaretokent
testservert SERVER_NAMEiP t SERVER_PORTN( ( ( R
R t process_viewt
login_viewR� t METAt process_responset cookiesR3 R t CSRF_COOKIE_NAMERx t coded_valuet COOKIESt methodR� t REQUESTR t process_requestt assertNotEqual( R1 R* t reqt respt resp2t csrf_cookiet token1t token2( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_login_csrf_rotate� s*
( RN RO R� R� R� R� ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR� � s / t LoginURLSettingsc B s� e Z d Z e d � Z e d d � d � � Z e d d � d � � Z e d d � d � � Z e d d � d
� � Z e d d � d � � Z
e d d
� d � � Z RS( s Tests for settings.LOGIN_URL.c C sB | j j d � } | j | j d � | j | j | d | �d S( Ns /login_required/i. RH ( R- R3 R4 R5 RM RF ( R1 RF RH R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt assertLoginURLEquals s R� s /login/c C s | j d � d S( Ns /login/?next=/login_required/( R� ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_standard_login_url s R c C s | j d � d S( Ns /login/?next=/login_required/( R� ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_named_login_url! s s http://remote.example.com/loginc C s' t d � } d | } | j | � d S( Ns! http://testserver/login_required/s' http://remote.example.com/login?next=%s( R R� ( R1 t quoted_nextRG ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_remote_login_url% s
s https:///login/c C s' t d � } d | } | j | � d S( Ns! http://testserver/login_required/s https:///login/?next=%s( R R� ( R1 R� RG ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_https_login_url+ s
s /login/?pretty=1c C s | j d d t �d S( Ns& /login/?pretty=1&next=/login_required/RH ( R� R� ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_login_url_with_querystring1 s s/ http://remote.example.com/login/?next=/default/c C s' t d � } d | } | j | � d S( Ns! http://testserver/login_required/s( http://remote.example.com/login/?next=%s( R R� ( R1 R� RG ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt+ test_remote_login_url_with_next_querystring5 s
( RN RO RP RS R� R R� R� R� R� R� R� ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR� s t LoginRedirectUrlTestc B sh e Z d Z d � Z d � Z e d d � d � � Z e d d � d � � Z e d d � d � � Z RS(
s& Tests for settings.LOGIN_REDIRECT_URL.c C s6 | j � } | j | j d � | j | j | � d S( Ni. ( R R4 R5 RM RF ( R1 RF R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt assertLoginRedirectURLEqual? s c C s | j d � d S( Ns /accounts/profile/( R� ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_defaultD s t LOGIN_REDIRECT_URLs /custom/c C s | j d � d S( Ns /custom/( R� ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_customG s RW c C s | j d � d S( Ns /password_reset/( R� ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt
test_namedK s s" http://remote.example.com/welcome/c C s | j d � d S( Ns" http://remote.example.com/welcome/( R� ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_remoteO s ( RN RO RP R� R� R R� R� R� ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR� < s t
LogoutTestc B se e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d d � Z
d
� Z RS( c C s | j t | j j k � d S( N( R/ R R- R0 ( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt confirm_logged_outW s c C s: | j � | j j d � } | j | d � | j � d S( s< Logout without next_page option renders the default templates /logout/s
Logged outN( R R- R3 R| R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_logout_defaultZ s
c C s6 | j � | j j d � } | j d | j k � d S( Ns /logout/R� ( R R- R3 R/ R; ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt
test_14377a s
c C s� | j � | j j d � } | j | j d � | j | j d � | j j d � } | j | j d � | j | j d � | j � d S( Ns /logout/next_page/i. s /somewhere/s /logout/next_page/?next=/login/s /login/( R R- R3 R4 R5 RM RF R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt( test_logout_with_overridden_redirect_urlg s
c C sP | j � | j j d � } | j | j d � | j | j d � | j � d S( sB Logout with next_page option given redirects to specified resources /logout/next_page/i. s /somewhere/N( R R- R3 R4 R5 RM RF R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt$ test_logout_with_next_page_specifiedt s
c C sP | j � | j j d � } | j | j d � | j | j d � | j � d S( s8 Logout with query string redirects to specified resources /logout/?next=/login/i. s /login/N( R R- R3 R4 R5 RM RF R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt" test_logout_with_redirect_argument| s
c C sP | j � | j j d � } | j | j d � | j | j d � | j � d S( s? Logout with custom query string redirects to specified resources( /logout/custom_query/?follow=/somewhere/i. s /somewhere/N( R R- R3 R4 R5 RM RF R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt) test_logout_with_custom_redirect_argument� s
c C sP | j � | j j d � } | j | j d � | j | j d � | j � d S( s2 Logout resolves names or URLs passed as next_page.s /logout/next_page/named/i. s /password_reset/N( R R- R3 R4 R5 RM RF R� ( R1 R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_logout_with_named_redirect� s
R* c C s( t d � } x� d D]� } d i | d
6t d 6t | � d 6} | j � | j j | � } | j | j d
� | j | | j k d | � | j
� q Wx� d D]� } d i | d
6t d 6t | � d 6} | j � | j j | � } | j | j d
� | j | | j k d | � | j
� q� Wd S( NR6 s http://example.coms http:///example.coms https://example.coms ftp://exampel.coms ///example.coms
//example.coms javascript:alert("XSS")s %(url)s?%(next)s=%(bad_url)sRF R� R� i. s %s should be blockeds /view/?param=http://example.coms /view/?param=https://example.coms /view?param=ftp://exampel.coms view/?param=//example.coms https://testserver/s HTTPS://testserver/s
//testserver/s /url%20with%20spaces/s %(url)s?%(next)s=%(good_url)sR� s %s should be allowed( s http://example.coms http:///example.coms https://example.coms ftp://exampel.coms ///example.coms
//example.coms javascript:alert("XSS")( s /view/?param=http://example.coms /view/?param=https://example.coms /view?param=ftp://exampel.coms view/?param=//example.coms https://testserver/s HTTPS://testserver/s
//testserver/s /url%20with%20spaces/( R R R R R- R3 R4 R5 R� RF R� R/ ( R1 R* t
logout_urlR� R� R2 R� R� ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR� � sH
c C ss t t j � } | j � } d | d <| j � | j | j j t j <| j j d � | j
| j j d d � d S( s? Check that language stored in session is preserved after logoutt plt django_languages /logout/N( R R t SESSION_ENGINEt SessionStoret savet session_keyR- R� t SESSION_COOKIE_NAMER3 R4 R0 ( R1 t engineR0 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_logout_preserve_language� s
( RN RO R� R� R� R� R� R� R� R� R� R ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR� T s
,t ChangelistTestsc B sM e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( s$ django.contrib.auth.tests.urls_adminc C sK t j j d d � j d t d t � | j � t j j d d � | _ d S( NR, R+ t is_stafft is_superusert pki ( R R� t filtert updateR� R R3 t admin( R1 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt setUp� s %
c C s� i | j d 6| j d 6| j d 6| j d 6| j d 6| j d 6| j j d � d 6| j j d � d
6| j j d � d 6| j j d � d 6| j j d � d
6| j j d � d 6| j j d � d 6| j j d � d 6| j d 6| j
d 6S( NR, R* Rd t is_activeR R s %Y-%m-%dt last_login_0s %H:%M:%St last_login_1s initial-last_login_0s initial-last_login_1t
date_joined_0t
date_joined_1s initial-date_joined_0s initial-date_joined_1t
first_namet last_name( R, R* Rd R R R t
last_logint strftimet date_joinedR R ( R1 t user( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt
get_user_data� s"
c C sW t d d � �B } | j j d � } | j | j d � | j t | � d � Wd QXd S( Ns* django.security.DisallowedModelAdminLookupR? s, /admin/auth/user/?password__startswith=sha1$i� i ( R R- R3 R4 R5 Re ( R1 Rq R2 ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt* test_changelist_disallows_password_lookups� s c C s| | j | j � } d | d | d <| j j d | j j | � } | j | d � t j j d � } | j | j
d � d S( Nt new_Rd s /admin/auth/user/%s/s /admin/auth/user/t ids Changed email.( R R
R- R. R t assertRedirectsR R� t latestR4 t change_message( R1 t dataR2 t row( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_user_change_email� s c C sd | j j d | j j | j | j � � } | j | d � t j j d � } | j | j
d � d S( Ns /admin/auth/user/%s/s /admin/auth/user/R s No fields changed.( R- R. R
R R R R R� R R4 R ( R1 R2 R ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_user_not_change� s
c C s� | j j d | j j i d d 6d d 6� } | j | d | j j � t j j d � } | j | j d � | j
� | j d d � d S( Ns /admin/auth/user/%s/password/R� t password2s /admin/auth/user/%s/R s Changed password.R* ( R- R. R
R R R R� R R4 R R6 R ( R1 R2 R ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt test_user_change_password s
c C s� t j j d d � } | j j d | j i d d 6d d 6� } | j | d | j � t j j d � } | j | j
| j j � | j | j t
| j � � | j | j d � d S( NRd s staffmember@example.coms /admin/auth/user/%s/password/R� R" s /admin/auth/user/%s/R s Changed password.( R R� R3 R- R. R R R R R4 t user_idR
t object_idt strR ( R1 R� R2 R ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt( test_user_change_different_user_password s
(
RN RO RR R R R R R! R# R' ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyR � s ( s enR" ( ( s enR" ( s. django.contrib.auth.hashers.SHA1PasswordHasher( s. django.contrib.auth.hashers.SHA1PasswordHasher(I R9 t osRv t django.confR R t django.contrib.sites.modelsR R t django.contrib.admin.modelsR t django.contrib.auth.modelsR t django.coreR t django.core.urlresolversR R t django.httpR R
t django.utils.encodingR t django.utils.httpR R
R t# django.utils.six.moves.urllib.parseR R t django.utils.importlibR t django.utils._osR t django.testR t django.test.utilsR R t django.middleware.csrfR t" django.contrib.sessions.middlewareR t django.contrib.authR R t django.contrib.auth.formsR R R t% django.contrib.auth.tests.custom_userR t django.contrib.auth.tests.utilsR t django.contrib.auth.viewsR R� R$ R} t joint dirnamet __file__RS R) RT Rc R� R� R� R� R� R� R ( ( ( sF /tmp/pip-install-XxeQeY/django/django/contrib/auth/tests/test_views.pyt <module> sf * +�Yi&x