|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/django/contrib/sessions/backends/__pycache__/ |
Upload File : |
o
3�aL6 � @ s� d dl Z d dlZd dlZd dlZd dlmZmZ d dlmZ d dlm Z d dl
m Z d dl m
Z
d dlmZ d dlmZmZmZ d d lmZ d d
lmZ d d lmZ ejej Z G d d
� d
e �Z G dd� de �Z G dd� d�Z dS )� N)�datetime� timedelta)�settings)�SuspiciousSession)�signing)�SuspiciousOperation)�timezone)�constant_time_compare�get_random_string� salted_hmac)�RemovedInDjango40Warning)�
import_string)�LANGUAGE_SESSION_KEYc @ � e Zd ZdZdS )� CreateErrorz�
Used internally as a consistent exception type to catch from save (see the
docstring for SessionBase.save() for details).
N��__name__�
__module__� __qualname__�__doc__� r r �G/usr/lib/python3/dist-packages/django/contrib/sessions/backends/base.pyr s r c @ r )� UpdateErrorzF
Occurs if Django tries to update a session that was deleted.
Nr r r r r r s r c @ s� e Zd ZdZdZdZe� Zd\dd�Zdd� Z d d
� Z
d d � Z d
d� Z e
dd� �Zd\dd�Zefdd�Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Z d-d.� Z d/d0� Z d1d2� Z d3d4� Z d5d6� Z!d7d8� Z"d9d:� Z#d;d<� Z$d=d>� Z%e
e$�Z&e
e$e%�Z'd]d@dA�Z(e
e(�Z)dBdC� Z*dDdE� Z+dFdG� Z,dHdI� Z-dJdK� Z.dLdM� Z/dNdO� Z0dPdQ� Z1dRdS� Z2d]dTdU�Z3d\dVdW�Z4dXdY� Z5e6dZd[� �Z7dS )^� SessionBasez-
Base class for all Session classes.
�
testcookie�workedNc C s" || _ d| _d| _ttj�| _d S )NF)� _session_key�accessed�modifiedr
r �SESSION_SERIALIZER�
serializer��self� session_keyr r r �__init__0 s zSessionBase.__init__c C �
|| j v S �N��_session�r" �keyr r r � __contains__6 �
zSessionBase.__contains__c C s" |t kr tjdtdd� | j| S )Nz�The user language will no longer be stored in request.session in Django 4.0. Read it from request.COOKIES[settings.LANGUAGE_COOKIE_NAME] instead.� )�
stacklevel)r �warnings�warnr r( r) r r r � __getitem__9 s �
zSessionBase.__getitem__c C s || j |< d| _d S �NT�r( r �r" r* �valuer r r � __setitem__C s
zSessionBase.__setitem__c C s | j |= d| _d S r2 r3 r) r r r � __delitem__G s
zSessionBase.__delitem__c C s d| j j S )Nzdjango.contrib.sessions.)� __class__r �r" r r r �key_saltK s zSessionBase.key_saltc C s | j �||�S r& )r( �get)r" r* �defaultr r r r; O s zSessionBase.getc C s: | j p|| jv | _ || ju rdn|f}| jj|g|�R � S )Nr )r r( �_SessionBase__not_given�pop)r" r* r< �argsr r r r> R s zSessionBase.popc C s( || j v r
| j | S d| _|| j |< |S r2 r3 r4 r r r �
setdefaultW s
zSessionBase.setdefaultc C s | j | | j< d S r& )�TEST_COOKIE_VALUE�TEST_COOKIE_NAMEr9 r r r �set_test_cookie_ s zSessionBase.set_test_cookiec C s | � | j�| jkS r& )r; rB rA r9 r r r �test_cookie_workedb s z SessionBase.test_cookie_workedc C s | | j = d S r& )rB r9 r r r �delete_test_cookiee s z SessionBase.delete_test_cookiec C s d| j j }t||��� S )Nzdjango.contrib.sessions)r8 r r � hexdigest)r" r5 r: r r r �_hashh s zSessionBase._hashc C s* t jdkr
| �|�S tj|| j| jdd�S )zGReturn the given session dictionary serialized and encoded as a string.�sha1T)�saltr �compress)r �DEFAULT_HASHING_ALGORITHM�_legacy_encoder �dumpsr: r )r" � session_dictr r r �encodem s
�zSessionBase.encodec C s� z t j|| j| jd�W S t jy3 z| �|�W Y S ty2 t�d�}|� d� i Y Y S w ty@ | �|� Y S w )N)rI r z!django.security.SuspiciousSession�Session data corrupted)
r �loadsr: r � BadSignature�_legacy_decode� Exception�logging� getLogger�warning)r" � session_data�loggerr r r �decodew s
� �zSessionBase.decodec C s4 | � � �|�}| �|�}t�|�� d | ��d�S )N� :�ascii)r rM rG �base64� b64encoderO rZ )r" rN �
serialized�hashr r r rL � s
zSessionBase._legacy_encodec
C s� t �|�d��}z |�dd�\}}| �|�}t|�� |�s!td��| �� � |�W S t
yQ } z t |t �rEt
�d|jj �}|�t|�� i W Y d }~S d }~ww )Nr\ r[ � rP zdjango.security.%s)r] � b64decoderO �splitrG r rZ r r rQ rT �
isinstancer rU rV r8 r rW �str)r" rX � encoded_datar` r_ �
expected_hash�erY r r r rS � s
��zSessionBase._legacy_decodec C s | j �|� d| _d S r2 )r( �updater )r" �dict_r r r ri � s
zSessionBase.updatec C r% r& r' r) r r r �has_key� r, zSessionBase.has_keyc C �
| j �� S r& )r( �keysr9 r r r rm � r, zSessionBase.keysc C rl r& )r( �valuesr9 r r r rn � r, zSessionBase.valuesc C rl r& )r( �itemsr9 r r r ro � r, zSessionBase.itemsc C s i | _ d| _d| _d S r2 )�_session_cacher r r9 r r r �clear� s
zSessionBase.clearc C s( z | j o| j W S ty Y dS w )zBReturn True when there is no session_key and the session is empty.T)r rp �AttributeErrorr9 r r r �is_empty� s
�zSessionBase.is_emptyc C s t dt�}| �|�s
|S q)z)Return session key that isn't being used.T� )r
�VALID_KEY_CHARS�existsr! r r r �_get_new_session_key� s
�z SessionBase._get_new_session_keyc C s | j d u r
| �� | _ | j S r& )r rw r9 r r r �_get_or_create_session_key� s
z&SessionBase._get_or_create_session_keyc C s |ot |�dkS )z�
Key must be truthy and at least 8 characters long. 8 characters is an
arbitrary lower bound for some minimal key security.
� )�lenr) r r r �_validate_session_key� s z!SessionBase._validate_session_keyc C s | j S r& )�_SessionBase__session_keyr9 r r r �_get_session_key� � z SessionBase._get_session_keyc C s | � |�r
|| _dS d| _dS )zV
Validate session key on assignment. Invalid values will set to None.
N)r{ r| �r" r5 r r r �_set_session_key� s
z SessionBase._set_session_keyFc C sL d| _ z| jW S ty% | jdu s|r i | _Y | jS | �� | _Y | jS w )z�
Lazily load session from storage (unless "no_load" is True, when only
an empty dict is stored) and store it in the current instance.
TN)r rp rr r# �load)r" �no_loadr r r � _get_session� s ��zSessionBase._get_sessionc C s t jS r& )r �SESSION_COOKIE_AGEr9 r r r �get_session_cookie_age� r~ z"SessionBase.get_session_cookie_agec K s� z|d }W n
t y t�� }Y nw z|d }W n t y( | �d�}Y nw |s/| �� S t|t�s6|S || }|jd |j S )z�Get the number of seconds until the session expires.
Optionally, this function accepts `modification` and `expiry` keyword
arguments specifying the modification and expiry of the session.
� modification�expiry�_session_expiryi�Q ) �KeyErrorr �nowr; r� rd r �days�seconds)r" �kwargsr� r� �deltar r r �get_expiry_age� s � �
zSessionBase.get_expiry_agec K sz z|d }W n
t y t�� }Y nw z|d }W n t y( | �d�}Y nw t|t�r0|S |p5| �� }|t|d� S )z�Get session the expiry date (as a datetime object).
Optionally, this function accepts `modification` and `expiry` keyword
arguments specifying the modification and expiry of the session.
r� r� r� )r� )r� r r� r; rd r r� r )r" r� r� r� r r r �get_expiry_date s � �
zSessionBase.get_expiry_datec C sL |du rz| d= W dS t y Y dS w t|t�r t�� | }|| d< dS )a*
Set a custom expiration for the session. ``value`` can be an integer,
a Python ``datetime`` or ``timedelta`` object or ``None``.
If ``value`` is an integer, the session will expire after that many
seconds of inactivity. If set to ``0`` then the session will expire on
browser close.
If ``value`` is a ``datetime`` or ``timedelta`` object, the session
will expire at that specific future time.
If ``value`` is ``None``, the session uses the global session expiry
policy.
Nr� )r� rd r r r� r r r r �
set_expiry$ s ��
zSessionBase.set_expiryc C s" | � d�du r
tjS | � d�dkS )a
Return ``True`` if the session is set to expire when the browser
closes, and ``False`` if there's an expiry date. Use
``get_expiry_date()`` or ``get_expiry_age()`` to find the actual expiry
date/age, if there is one.
r� Nr )r; r � SESSION_EXPIRE_AT_BROWSER_CLOSEr9 r r r �get_expire_at_browser_close> s z'SessionBase.get_expire_at_browser_closec C s | � � | �� d| _dS )zc
Remove the current session data from the database and regenerate the
key.
N)rq �deleter r9 r r r �flushI s
zSessionBase.flushc C s0 | j }| j}| �� || _|r| �|� dS dS )zU
Create a new session key, while retaining the current session data.
N)r( r# �createrp r� )r" �datar* r r r � cycle_keyR s �zSessionBase.cycle_keyc C � t d��)zF
Return True if the given session_key already exists.
z9subclasses of SessionBase must provide an exists() method��NotImplementedErrorr! r r r rv _ � zSessionBase.existsc C r� )z�
Create a new session instance. Guaranteed to create a new object with
a unique key and will have saved the result once (with empty data)
before the method returns.
z8subclasses of SessionBase must provide a create() methodr� r9 r r r r� e � zSessionBase.createc C r� )z�
Save the session data. If 'must_create' is True, create a new session
object (or raise CreateError). Otherwise, only update an existing
object and don't create one (raise UpdateError if needed).
z6subclasses of SessionBase must provide a save() methodr� )r" � must_creater r r �savem r� zSessionBase.savec C r� )zx
Delete the session data under this key. If the key is None, use the
current session key value.
z8subclasses of SessionBase must provide a delete() methodr� r! r r r r� u s zSessionBase.deletec C r� )z@
Load the session data and return a dictionary.
z6subclasses of SessionBase must provide a load() methodr� r9 r r r r� | r� zSessionBase.loadc C r� )a
Remove expired sessions from the session store.
If this operation isn't possible on a given backend, it should raise
NotImplementedError. If it isn't necessary, because the backend has
a built-in expiration mechanism, it should be a no-op.
z.This backend does not support clear_expired().r� )�clsr r r �
clear_expired� s zSessionBase.clear_expiredr& )F)8r r r r rB rA �objectr= r$ r+ r1 r6 r7 �propertyr: r; r> r@ rC rD rE rG rO rZ rL rS ri rk rm rn ro rq rs rw rx r{ r} r� r# r r� r( r� r� r� r� r� r� r� rv r� r� r� r� � classmethodr� r r r r r ' sj
r )!r] rU �stringr/ r r � django.confr �"django.contrib.sessions.exceptionsr � django.corer �django.core.exceptionsr � django.utilsr �django.utils.cryptor r
r �django.utils.deprecationr �django.utils.module_loadingr
�django.utils.translationr �ascii_lowercase�digitsru rT r r r r r r r �<module> s$