|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/django/contrib/auth/__pycache__/ |
Upload File : |
o
3�a�" � @ s d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dl m
Z
m Z m Z d dl
mZ d dlmZmZ d dlmZ d d lmZmZ e jdd
�d d � �Zd
d� Zd!dd�Zd!dd�Z d"dd�Z d"dd�Z ee e �Z G dd� d�Z!dd� Z"G dd � d �Z#G d d � d �Z$G d d � d �Z%dS )#� N)�SequenceMatcher)�Path)�settings)�FieldDoesNotExist�ImproperlyConfigured�ValidationError)�lazy)� format_html�format_html_join)�
import_string)�gettext�ngettext)�maxsizec C s
t tj�S �N)�get_password_validatorsr �AUTH_PASSWORD_VALIDATORS� r r �I/usr/lib/python3/dist-packages/django/contrib/auth/password_validation.py� get_default_password_validators s
r c
C sb g }| D ]*}zt |d �}W n ty d}t||d ��w |�|di |�di ���� q|S )N�NAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.�OPTIONSr )r � ImportErrorr �append�get)�validator_config�
validators� validator�klass�msgr r r r s � r c C sj g }|du r t � }|D ]!}z|�| |� W q ty, } z |�|� W Y d}~q d}~ww |r3t|��dS )z�
Validate whether the password meets all validator requirements.
If the password is valid, return ``None``.
If the password is invalid, raise ValidationError with all error messages.
N)r �validater r )�password�user�password_validators�errorsr �errorr r r �validate_password# s ���r% c C s6 |du rt � }|D ]}t|ddd� �}|| |� q dS )zy
Inform all validators that have implemented a password_changed() method
that the password has been changed.
N�password_changedc W s d S r r )�ar r r �<lambda>> s z"password_changed.<locals>.<lambda>)r �getattr)r r! r" r r& r r r r& 6 s �r& c C s. g }| du r t � } | D ] }|�|�� � q |S )zG
Return a list of all help texts of all configured validators.
N)r r �
get_help_text)r" �
help_textsr r r r � password_validators_help_textsB s r, c C s0 t | �}tdddd� |D ��}|rtd|�S dS )z`
Return an HTML string with all help texts of all configured validators
in an <ul>.
� z <li>{}</li>c s s � | ]}|fV qd S r r )�.0� help_textr r r � <genexpr>T s � z6_password_validators_help_text_html.<locals>.<genexpr>z <ul>{}</ul>)r, r
r )r" r+ �
help_itemsr r r �#_password_validators_help_text_htmlN s r2 c @ s, e Zd ZdZd
dd�Zd dd�Zdd � ZdS ) �MinimumLengthValidatorz?
Validate whether the password is of a minimum length.
� c C s
|| _ d S r )�
min_length)�selfr5 r r r �__init___ s
z MinimumLengthValidator.__init__Nc C s0 t |�| jk rttdd| j�dd| jid��d S )NzNThis password is too short. It must contain at least %(min_length)d character.zOThis password is too short. It must contain at least %(min_length)d characters.�password_too_shortr5 ��code�params)�lenr5 r r
�r6 r r! r r r r b s ���z MinimumLengthValidator.validatec C s t dd| j�d| ji S )Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.r5 )r
r5 �r6 r r r r* n s ��z$MinimumLengthValidator.get_help_text)r4 r )�__name__�
__module__� __qualname__�__doc__r7 r r* r r r r r3 [ s
r3 c C s0 t | �}|d | }t |�}|d| ko||k S )a�
Test that value is within a reasonable range of password.
The following ratio calculations are based on testing SequenceMatcher like
this:
for i in range(0,6):
print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio())
which yields:
1 1.0
10 0.18181818181818182
100 0.019801980198019802
1000 0.001998001998001998
10000 0.00019998000199980003
100000 1.999980000199998e-05
This means a length_ratio of 10 should never yield a similarity higher than
0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be
calculated via 2 / length_ratio. As a result we avoid the potentially
expensive sequence matching.
� �
)r< )r �max_similarity�value�pwd_len�length_bound_similarity� value_lenr r r � exceeds_maximum_length_ratiov s rJ c @ s4 e Zd ZdZdZedfdd�Zd dd�Zd d
� ZdS ) � UserAttributeSimilarityValidatora�
Validate whether the password is sufficiently different from the user's
attributes.
If no specific attributes are provided, look at a sensible list of
defaults. Attributes that don't exist are ignored. Comparison is made to
not only the full attribute value, but also its components, so that, for
example, a password is validated against either part of an email address,
as well as the full address.
)�username�
first_name� last_name�emailgffffff�?c C s || _ |dk r td��|| _d S )Ng�������?z#max_similarity must be at least 0.1)�user_attributes�
ValueErrorrE )r6 rP rE r r r r7 � s
z)UserAttributeSimilarityValidator.__init__Nc
C s� |sd S |� � }| jD ]W}t||d �}|rt|t�sq |� � }t�d|�|g }|D ]7}t|| j|�r4q*t ||d��
� | jkraz t|j � |�j
�}W n tyU |}Y nw ttd�dd|id��q*q d S )Nz\W+)r' �bz4The password is too similar to the %(verbose_name)s.�password_too_similar� verbose_namer9 )�lowerrP r) �
isinstance�str�re�splitrJ rE r � quick_ratio�_meta� get_fieldrT r r �_) r6 r r! �attribute_namerF � value_lower� value_parts�
value_partrT r r r r � s4
�����z)UserAttributeSimilarityValidator.validatec C � t d�S )NuH Your password can’t be too similar to your other personal information.�r] r> r r r r* � � z.UserAttributeSimilarityValidator.get_help_textr )r? r@ rA rB �DEFAULT_USER_ATTRIBUTESr7 r r* r r r r rK � s
rK c @ s@ e Zd ZdZee��� jd Zefdd�Z d
dd�Z
dd � Z dS ) �CommonPasswordValidatora�
Validate whether the password is a common password.
The password is rejected if it occurs in a provided list of passwords,
which may be gzipped. The list Django ships with contains 20000 common
passwords (lowercased and deduplicated), created by Royce Williams:
https://gist.github.com/roycewilliams/281ce539915a947a23db17137d91aeb7
The password list must be lowercased to match the comparison in validate().
zcommon-passwords.txt.gzc C s� z%t j|ddd��}dd� |D �| _W d � W d S 1 s w Y W d S tyM t|��}dd� |D �| _W d � Y d S 1 sEw Y Y d S w )N�rtzutf-8)�encodingc S � h | ]}|� � �qS r ��strip�r. �xr r r � <setcomp>� � z3CommonPasswordValidator.__init__.<locals>.<setcomp>c S ri r rj rl r r r rn � ro )�gzip�open� passwords�OSError)r6 �password_list_path�fr r r r7 � s &�
&��z CommonPasswordValidator.__init__Nc C s& |� � �� | jv rttd�dd��d S )Nz This password is too common.�password_too_common�r: )rU rk rr r r] r= r r r r � s ��z CommonPasswordValidator.validatec C rb )Nu2 Your password can’t be a commonly used password.rc r> r r r r* � rd z%CommonPasswordValidator.get_help_textr ) r? r@ rA rB r �__file__�resolve�parent�DEFAULT_PASSWORD_LIST_PATHr7 r r* r r r r rf � s
rf c @ s" e Zd ZdZddd�Zdd� ZdS )�NumericPasswordValidatorz8
Validate whether the password is alphanumeric.
Nc C s |� � r ttd�dd��d S )Nz"This password is entirely numeric.�password_entirely_numericrw )�isdigitr r] r= r r r r � s ��z!NumericPasswordValidator.validatec C rb )Nu* Your password can’t be entirely numeric.rc r> r r r r* � rd z&NumericPasswordValidator.get_help_textr )r? r@ rA rB r r* r r r r r| � s
r| )NNr )&� functoolsrp rX �difflibr �pathlibr � django.confr �django.core.exceptionsr r r �django.utils.functionalr �django.utils.htmlr r
�django.utils.module_loadingr �django.utils.translationr r] r
� lru_cacher r r% r& r, r2 rW �"password_validators_help_text_htmlr3 rJ rK rf r| r r r r �<module> s0
0