|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/django/contrib/auth/__pycache__/ |
Upload File : |
o
3�a� � @ s� d dl mZ d dlmZ d dlmZ d dlmZ d dlm Z d dl
m Z dd� Z G d d
� d
e �Z
G d d � d e �ZG d
d� de�ZdS )� )�auth)� load_backend)�RemoteUserBackend)�ImproperlyConfigured)�MiddlewareMixin)�SimpleLazyObjectc C s t | d�s t�| �| _| jS )N� _cached_user)�hasattrr �get_userr ��request� r
�@/usr/lib/python3/dist-packages/django/contrib/auth/middleware.pyr
s
r
c @ s e Zd Zdd� ZdS )�AuthenticationMiddlewarec s( t � d�s J d��t� fdd��� _d S )N�sessionz�The Django authentication middleware requires session middleware to be installed. Edit your MIDDLEWARE setting to insert 'django.contrib.sessions.middleware.SessionMiddleware' before 'django.contrib.auth.middleware.AuthenticationMiddleware'.c s t � �S )N)r
r
r r
r �<lambda> s z:AuthenticationMiddleware.process_request.<locals>.<lambda>)r r �user)�selfr r
r r �process_request s �z(AuthenticationMiddleware.process_requestN)�__name__�
__module__� __qualname__r r
r
r
r r s r c @ s0 e Zd ZdZdZdZdd� Zdd� Zdd � Zd
S ) �RemoteUserMiddlewarea�
Middleware for utilizing Web-server-provided authentication.
If request.user is not authenticated, then this middleware attempts to
authenticate the username passed in the ``REMOTE_USER`` request header.
If authentication is successful, the user is automatically logged in to
persist the user in the session.
The header used is configurable and defaults to ``REMOTE_USER``. Subclass
this class and change the ``header`` attribute if you need to use a
different header.
� REMOTE_USERTc C s� t |d�s td��z|j| j }W n ty' | jr$|jjr$| �|� Y d S w |jjr>|j� � | �
||�kr9d S | �|� t j ||d�}|rR||_t �
||� d S d S )Nr z�The Django remote user auth middleware requires the authentication middleware to be installed. Edit your MIDDLEWARE setting to insert 'django.contrib.auth.middleware.AuthenticationMiddleware' before the RemoteUserMiddleware class.)� remote_user)r r �META�header�KeyError�force_logout_if_no_headerr �is_authenticated�_remove_invalid_user� get_username�clean_usernamer � authenticate�login)r r �usernamer r
r
r r . s(
�
�
�z$RemoteUserMiddleware.process_requestc C s< |j tj }t�|�}z|�|�}W |S ty Y |S w )zr
Allow the backend to clean the username, if the backend defines a
clean_username method.
)r r �BACKEND_SESSION_KEYr r" �AttributeError)r r% r � backend_str�backendr
r
r r" T s
��z#RemoteUserMiddleware.clean_usernamec C sT z t |j�tjd��}W n ty t�|� Y dS w t|t�r(t�|� dS dS )z�
Remove the current authenticated user in the request which is invalid
but only if the user is authenticated via the RemoteUserBackend.
� N) r r �getr r& � ImportError�logout�
isinstancer )r r �stored_backendr
r
r r a s �
�z)RemoteUserMiddleware._remove_invalid_userN) r r r �__doc__r r r r" r r
r
r
r r s &
r c @ s e Zd ZdZdZdS )� PersistentRemoteUserMiddlewarea�
Middleware for Web-server provided authentication on logon pages.
Like RemoteUserMiddleware but keeps the user authenticated even if
the header (``REMOTE_USER``) is not found in the request. Useful
for setups when the external authentication via ``REMOTE_USER``
is only expected to happen on some "logon" URL and the rest of
the application wants to use Django's authentication mechanism.
FN)r r r r0 r r
r
r
r r1 p s r1 N)�django.contribr �django.contrib.authr � django.contrib.auth.backendsr �django.core.exceptionsr �django.utils.deprecationr �django.utils.functionalr r
r r r1 r
r
r
r �<module> s V