a
f�Wc�N � @ s� d Z ddlmZ ddlmZ ddlmZmZmZ ddl Z e �
e �Z ddl
mZ ddlmZmZmZmZ ddlmZmZmZ dd lmZ dd
lmZm Z m Z m Z dd l m Z ddl!m" m#Z$ g d �Z%da&d
d� Z'dZ(G dd� de$j)e$j*�Z+G dd� de$j,e+�Z-G dd� de+�Z.G dd� de+�Z/e$j0dee d�e d�dd�Z1d e1_2e1 j3d 7 _3G d d � d e�Z4G d d!� d!e-�Z5G d"d#� d#e5�Z6e$j0d$ej7d%d&�e d'�e d(�d)d*�Z8d'e8_2e8 j3d 7 _3G d+d,� d,e$j9e$j)e$j*�Z:G d-d.� d.e$j;j<e$j=�Z>dS )/z5passlib.handlers.django- Django password hash support� )� b64encode)�hexlify)�md5�sha1�sha256N)�_wrapped_bcrypt)�argon2�bcrypt� pbkdf2_sha1�
pbkdf2_sha256)�
to_unicode�rng�
getrandstr)� BASE64_CHARS)�
str_to_uascii�
uascii_to_str�unicode�u)� pbkdf2_hmac)�django_salted_sha1�django_salted_md5�
django_bcrypt�django_pbkdf2_sha1�django_pbkdf2_sha256�
django_argon2�django_des_crypt�django_disabledc C s t d u rddlm a t S )Nr )� des_crypt)r � passlib.hash� r r �;/usr/lib/python3.9/site-packages/passlib/handlers/django.py�_import_des_crypt& s r! Z>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789c @ s: e Zd ZdZdZdZdZeZe j
Z e dd� �Z
dd� ZdS ) �DjangoSaltedHashz2base class providing common code for django hashes)�salt� salt_size� Nc C s" t j|| j| d�\}}| ||d�S )N�Zhandler�r# �checksum)�uh� parse_mc2�ident��cls�hashr# �chkr r r � from_stringB s z DjangoSaltedHash.from_stringc C s t �| j| j| j�S �N)r) �
render_mc2r+ r# r( ��selfr r r � to_stringG s zDjangoSaltedHash.to_string)�__name__�
__module__� __qualname__�__doc__� setting_kwds�default_salt_sizeZ
max_salt_size�
SALT_CHARS�
salt_charsr) ZLOWER_HEX_CHARS�checksum_chars� classmethodr0 r5 r r r r r" 2 s
r" c @ s2 e Zd ZdZejd ZdZedd� �Zdd� Z dS ) �DjangoVariableHashzEbase class providing common code for django hashes w/ variable rounds)�rounds� c C s& t j|| j| d�\}}}| |||d�S )Nr& )rA r# r( )r) Z parse_mc3r+ )r- r. rA r# r/ r r r r0 Q s z DjangoVariableHash.from_stringc C s t �| j| j| j| j�S r1 )r) Z
render_mc3r+ rA r# r( r3 r r r r5 V s z DjangoVariableHash.to_stringN)
r6 r7 r8 r9 r" r: Z
min_roundsr? r0 r5 r r r r r@ K s
r@ c @ s, e Zd ZdZd ZdZed�ZdZdd� Z dS )r a� This class implements Django's Salted SHA1 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and uses a single round of SHA1.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods accept the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
This should be compatible with Django 1.4's :class:`!SHA1PasswordHasher` class.
.. versionchanged: 1.6
This class now generates 12-character salts instead of 5,
and generated salts uses the character range ``[0-9a-zA-Z]`` instead of
the ``[0-9a-f]``. This is to be compatible with how Django >= 1.4
generates these hashes; but hashes generated in this manner will still be
correctly interpreted by earlier versions of Django.
r zsha1$�( c C s0 t |t�r|�d�}tt| j�d�| ��� �S �N�utf-8�ascii)�
isinstancer �encoder r r# � hexdigest�r4 �secretr r r �_calc_checksumy s
z!django_salted_sha1._calc_checksumN�
r6 r7 r8 r9 �name� django_namer r+ �
checksum_sizerL r r r r r Y s r c @ s, e Zd ZdZd ZdZed�ZdZdd� Z dS )r a� This class implements Django's Salted MD5 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and uses a single round of MD5.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods accept the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
This should be compatible with the hashes generated by
Django 1.4's :class:`!MD5PasswordHasher` class.
.. versionchanged: 1.6
This class now generates 12-character salts instead of 5,
and generated salts uses the character range ``[0-9a-zA-Z]`` instead of
the ``[0-9a-f]``. This is to be compatible with how Django >= 1.4
generates these hashes; but hashes generated in this manner will still be
correctly interpreted by earlier versions of Django.
r zmd5$� c C s0 t |t�r|�d�}tt| j�d�| ��� �S rD )rG r rH r r r# rI rJ r r r rL � s
z django_salted_md5._calc_checksumNrM r r r r r ~ s r r zbcrypt$a� This class implements Django 1.4's BCrypt wrapper, and follows the :ref:`password-hash-api`.
This is identical to :class:`!bcrypt` itself, but with
the Django-specific prefix ``"bcrypt$"`` prepended.
See :doc:`/lib/passlib.hash.bcrypt` for more details,
the usage and behavior is identical.
This should be compatible with the hashes generated by
Django 1.4's :class:`!BCryptPasswordHasher` class.
.. versionadded:: 1.6
)�prefixr+ �docr )rO c s\ e Zd ZdZd ZdZeZed�Z e
dd� �Z e
� fdd��Z � fdd �Z
� fd
d �Z� ZS ) �django_bcrypt_sha256a� This class implements Django 1.6's Bcrypt+SHA256 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
While the algorithm and format is somewhat different,
the api and options for this hash are identical to :class:`!bcrypt` itself,
see :doc:`bcrypt </lib/passlib.hash.bcrypt>` for more details.
.. versionadded:: 1.6.2
Z
bcrypt_sha256zbcrypt_sha256$c C s t �|�}|sdS |�| j�S �NF)r) �to_unicode_for_identify�
startswith�
django_prefix�r- r. r r r �identify� s
z django_bcrypt_sha256.identifyc s\ t |dd�}|�| j�s$tj�| ��|t| j�d � }|�d�sLtj�| ��tt | ��
|�S )NrF r. z$2) r rW rX r) �exc�InvalidHashError�len�MalformedHashError�superrT r0 )r- r. �bhash�� __class__r r r0 � s
z django_bcrypt_sha256.from_stringc s t t| ��� }t| j�| S r1 )r_ rT r5 r rX )r4 r` ra r r r5 � s z django_bcrypt_sha256.to_stringc s6 t |t�r|�d�}t| �|��� �}tt| ��|�S )NrE ) rG r rH r �_digest�digestr_ rT rL rJ ra r r rL � s
z#django_bcrypt_sha256._calc_checksum)r6 r7 r8 r9 rN rO r rc r rX r? rZ r0 r5 rL �
__classcell__r r ra r rT � s
rT c @ sD e Zd ZdZd ZdZed�ZdZdZ e
j Z dZ
ejZdZdd � Zd
S ) r a� This class implements Django's PBKDF2-HMAC-SHA256 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 29000, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
This should be compatible with the hashes generated by
Django 1.4's :class:`!PBKDF2PasswordHasher` class.
.. versionadded:: 1.6
r zpbkdf2_sha256$rB l �� �, r c C s& t | j|| j| j�}t|��� �d�S )NrF )r rc r# rA r �rstrip�decode)r4 rK r. r r r rL # s z#django_pbkdf2_sha256._calc_checksumN)r6 r7 r8 r9 rN rO r r+ �
min_salt_sizeZ
max_roundsr) ZPADDED_BASE64_CHARSr> rP r �default_roundsrc rL r r r r r � s #r c @ s. e Zd ZdZd ZdZed�ZdZe j
Z
dZ dS )r a� This class implements Django's PBKDF2-HMAC-SHA1 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 131000, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
This should be compatible with the hashes generated by
Django 1.4's :class:`!PBKDF2SHA1PasswordHasher` class.
.. versionadded:: 1.6
r
z pbkdf2_sha1$� r N) r6 r7 r8 r9 rN rO r r+ rP r
rj rc r r r r r ( s #r r �I)�typer zargon2$argon2i$a� This class implements Django 1.10's Argon2 wrapper, and follows the :ref:`password-hash-api`.
This is identical to :class:`!argon2` itself, but with
the Django-specific prefix ``"argon2$"`` prepended.
See :doc:`argon2 </lib/passlib.hash.argon2>` for more details,
the usage and behavior is identical.
This should be compatible with the hashes generated by
Django 1.10's :class:`!Argon2PasswordHasher` class.
.. versionadded:: 1.7
)rN �wrappedrR r+ rS c @ s^ e Zd ZdZd ZdZdZed�Ze j
Z Z dZ
d ZZdZdZed d
� �Zd d � Zd
d� ZdS )r a� This class implements Django's :class:`des_crypt` wrapper, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods accept the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, django_des_crypt will silently truncate passwords larger than 8 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
This should be compatible with the hashes generated by
Django 1.4's :class:`!CryptPasswordHasher` class.
Note that Django only supports this hash on Unix systems
(though :class:`!django_des_crypt` is available cross-platform
under Passlib).
.. versionchanged:: 1.6
This class will now accept hashes with empty salt strings,
since Django 1.4 generates them this way.
Zcrypt)r# r$ Ztruncate_errorzcrypt$� � � Tc C sj t j|| j| d�\}}|r^|s,|d d� }n&|d d� |d d� krRt j�| d��|dd � }| ||d�S )Nr& rp z0first two digits of salt and checksum must matchr' )r) r* r+ r[ r^ r, r r r r0 � s � z django_des_crypt.from_stringc C sB | j }|d d� | j }| jr.t�| j||�S t�| jd|�S d S )Nrp � )r# r( �use_duplicate_saltr) r2 r+ )r4 r# r/ r r r r5 � s
zdjango_des_crypt.to_stringc C s8 t d u rt� | jr | �|� t | jd d� d��|�S )Nrp )r# )r r! Z use_defaultsZ_check_truncate_policyr# rL rJ r r r rL � s
z django_des_crypt._calc_checksumN)r6 r7 r8 r9 rN rO r: r r+ r) Z HASH64_CHARSr> r= rP ri r; Z
truncate_sizers r? r0 r5 rL r r r r r t s
r c @ s@ e Zd ZdZd Zed�ZdZedd� �Z dd� Z
edd � �Z d
S ) r aF This class provides disabled password behavior for Django, and follows the :ref:`password-hash-api`.
This class does not implement a hash, but instead
claims the special hash string ``"!"`` which Django uses
to indicate an account's password has been disabled.
* newly encrypted passwords will hash to ``"!"``.
* it rejects all passwords.
.. note::
Django 1.6 prepends a randomly generated 40-char alphanumeric string
to each unusuable password. This class recognizes such strings,
but for backwards compatibility, still returns ``"!"``.
See `<https://code.djangoproject.com/ticket/20079>`_ for why
Django appends an alphanumeric string.
.. versionchanged:: 1.6.2 added Django 1.6 support
.. versionchanged:: 1.7 started appending an alphanumeric string.
�!rC c C s t �|�}|�| j�S r1 )r) rV rW � _hash_prefixrY r r r rZ � s
zdjango_disabled.identifyc C s t ttd d� | j�S )N���)r r
r �
suffix_lengthrJ r r r rL � s z django_disabled._calc_checksumc C s$ t �|� | �|�s t j�| ��dS rU )r) Zvalidate_secretrZ r[ r\ )r- rK r. r r r �verify� s
zdjango_disabled.verifyN) r6 r7 r8 r9 rN r ru rw r? rZ rL rx r r r r r � s
r )?r9 �base64r Zbinasciir Zhashlibr r r ZloggingZ getLoggerr6 �logZpasslib.handlers.bcryptr r r r r
r Z
passlib.utilsr r
r Zpasslib.utils.binaryr Zpasslib.utils.compatr r r r Zpasslib.crypto.digestr Zpasslib.utils.handlersZutils�handlersr) �__all__r r! r< ZHasSaltZGenericHandlerr" Z HasRoundsr@ r r Z
PrefixWrapperr rO Z_using_clone_attrsrT r r Zusingr Z
TruncateMixinr ZifcZ DisabledHashZ
StaticHandlerr r r r r �<module> sN %* �532
�^