__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
a
f�Wc�� � @ sR d Z ddlmZmZmZ ddlZe�e�Zddl Z ddl
Z
ddl m Z
mZmZ ddlmZmZmZ ddlmZ ddlmZmZmZmZ ddlm Z m Z m Z dd l m Z dd
l!m"Z"m#Z#m$Z$ dd l%m&Z& g d �Z'eekZ(e(�r0dd
l)m*Z*m+Z+ e,e*e+��se-de*f ��e*j.�se*�/� ddl0m Z e �1ddg� edk�rFe�2de� e3� Z4dd� Z5e(�rvddl6m7Z7 G dd� de7�Z8dd� Z9dd � Z:d1d d �Z;ed k�r�e;e
j<�Z=n ed k�r�e;e
j>�Z=n
e;e
j�Z=dd!l?m@Z@ eAd"e@jBe=�Cd#�d$��Dd"�fd!�ZEG d%d&� d&e3�ZFG d'd(� d(e"eF�ZGd)ZHd*ZIG d+d,� d,eG�ZJG d-d.� d.eJ�ZKG d/d0� d0eG�ZLdS )2ztest passlib.ext.django� )�absolute_import�division�print_functionN)�apps�exc�registry)�django10_context�django14_context�django16_context)� CryptContext)�DJANGO_VERSION�MIN_DJANGO_VERSION�DjangoTranslator�quirks)� iteritems�get_method_function�u)�memoized_property)�TestCase� TEST_MODE�handler_derived_from)�get_handler_case)�DjangoBehaviorTest�ExtensionBehaviorTest�DjangoExtensionTest�_ExtensionSupport�_ExtensionTest)�settings� LazySettingsz4expected django.conf.settings to be LazySettings: %r)r zdjango.contrib.contenttypeszdjango.contrib.auth)� � z1this release hasn't been tested against Django %rc K s@ t | �D ]2\}}|tu r.tt|�r:tt|� qtt||� qdS )z*helper to update django settings from kwdsN)r �UNSET�hasattrr �delattr�setattr)�kwds�k�v� r( �A/usr/lib/python3.9/site-packages/passlib/tests/test_ext_django.py�update_settingsN s
r* )�Userc @ s< e Zd ZdZG dd� d�Zedd� �Zdd� Zd d d
�ZdS ) �FakeUserz#mock user object for use in testingc @ s e Zd Ze ZdS )z
FakeUser.MetaN)�__name__�
__module__� __qualname__Z app_labelr( r( r( r) �Meta_ s r0 c C s g S �Nr( ��selfr( r( r) �saved_passwordsb s zFakeUser.saved_passwordsc C s0 z | j d d � W | j d d �= S | j d d �= 0 d S r1 )r4 r2 r( r( r) �pop_saved_passwordsf s
�z FakeUser.pop_saved_passwordsNc C s | j �| j� d S r1 )r4 �append�password)r3 Z
update_fieldsr( r( r) �savel s z
FakeUser.save)N) r- r. r/ �__doc__r0 r r4 r5 r8 r( r( r( r) r, Z s
r, c s& g � � fdd�} � fdd�}|| _ | S )Nc s � � | � d S r1 )r6 )r7 ��stater( r) �setterr s z"create_mock_setter.<locals>.setterc s* z� d d � W � d d �= S � d d �= 0 d S r1 r( r( r: r( r) �popstatet s
�z$create_mock_setter.<locals>.popstate)r= )r< r= r( r: r) �create_mock_setterp s
r> c
C sp | sJ �ddl m} z|d| d� W dS tyj } z,t�dt|��rTW Y d}~dS � W Y d}~n
d}~0 0 dS ) z|
check whether django hasher is available;
or if it should be skipped because django lacks third-party library.
r ��
make_password� ��hasherTz3Couldn't load '.*?' algorithm .* No module named .*NF)�django.contrib.auth.hashersr@ �
ValueError�re�match�str)�namer@ �errr( r( r) � check_django_hasher_has_backend} s rK c C sR t | d�r| �� } | jdd� |du r<tr<ddlm} |j}|rN| j||d� | S )z�
helper to build django CryptContext config matching expected setup for stock django deploy.
:param kwds:
:param sha_rounds:
:return:
�to_dict�auto)�
deprecatedNr )�PBKDF2PasswordHasher)Z"django_pbkdf2_sha1__default_rounds�$django_pbkdf2_sha256__default_rounds)r" rL �update�has_min_djangorD rO Z
iterations)r% Z
sha_roundsrO r( r( r) �_modify_django_config� s
� �rS )r � �rT �
)�django_pbkdf2_sha256znot a passwordrP ��roundsc @ sH e Zd ZdZedd� �Zdd� Zddd�Zg d �Zdd d �Z d
d� Z
dS )r zx
test support funcs for loading/unloading extension.
this class is mixed in to various TestCase subclasses.
c c s� ddl m}m} ddg}ddg}g d�}||f|j|f||fg}|D ]l\}}t|�D ]Z} | �d�rdqT|j�| t�}
|
tu r�| |vr�qTt |
�}
t
|
dd �} | rT|| | | |v fV qTqDd S )
z�helper to scan for monkeypatches.
returns tuple containing:
* object (module or class)
* attribute of object
* value of attribute
* whether it should or should not be patched
r )�models�hashers�check_password� set_passwordr@ )r\ r@ Z
get_hasher�identify_hasherZ get_hashers�_r. N) �django.contrib.authrZ r[ r+ �dir�
startswith�__dict__�getr! r �getattr) �clsrZ r[ Z
user_attrsZ model_attrsZ hasher_attrsZobjs�obj�patched�attr�value�sourcer( r( r) �_iter_patch_candidates� s& �
z(_ExtensionSupport._iter_patch_candidatesc C sx t j�d�}| �|o|jjd� | �� D ]J\}}}}|rV| �|�d�d|||f � q(| �|�d�d|||f � q(dS )z8
test that django is in unpatched state
�passlib.ext.django.modelszpatch should not be enabledzdjango.contrib.auth.z#obj=%r attr=%r was not reverted: %r�passlib.�/obj=%r attr=%r should not have been patched: %rN) �sys�modulesrd � assertFalse�adapterrh rl �
assertTruerb )r3 �modrg ri rk rh r( r( r) �assert_unpatched� s �� ��z"_ExtensionSupport.assert_unpatchedNc C s� t j�d�}| �|o|jjd� | �� D ]H\}}}}|rT| �|dkd|||f � q(| �|�d�d|||f � q(|dur�t �
|�}| � |j j
dd �|j
dd �� dS )
zY
helper to ensure django HAS been patched, and is using specified config
rm z patch should have been enabledzpasslib.ext.django.utilsz+obj=%r attr=%r should have been patched: %rrn ro NT��resolve)rp rq rd rt rs rh rl rr rb r � _norm_source� assertEqual�password_contextrL )r3 �contextru rg ri rk rh r( r( r) �assert_patched s&
�� ��
�z _ExtensionSupport.assert_patched)�PASSLIB_CONFIG�PASSLIB_CONTEXT�PASSLIB_GET_CATEGORYTc K sb | � � |r |�d�p |�d�}| jD ]}|�|t� q&tf i |�� ddl}|r^| j|d� dS )zO
helper to load extension with specified config & patch django
r~ r r N�r| )�unload_extensionrd � _config_keys�
setdefaultr! r* �passlib.ext.django.modelsr} )r3 �checkr% �config�key�passlibr( r( r) �load_extension/ s
z _ExtensionSupport.load_extensionc C sL t j�d�}|r"|j�� t jd= tf i tdd� | jD ���� | �� dS )z?
helper to remove patches and unload extension
rm c s s | ]}|t fV qd S r1 )r! )�.0r� r( r( r) � <genexpr>G � z5_ExtensionSupport.unload_extension.<locals>.<genexpr>N) rp rq rd rs Z remove_patchr* �dictr� rv )r3 ru r( r( r) r� = s
z"_ExtensionSupport.unload_extension)N)T) r- r. r/ r9 � classmethodrl rv r} r� r� r� r( r( r( r) r � s
$
r c s e Zd ZdZ� fdd�Z� ZS )r z�
TestCase mixin which makes sure extension is unloaded before test;
and make sure it's unloaded after test as well.
c sN t t| ��� | �d� ts(| �d��nts6| �d��| �� | �| j� d S )N�defaultzDjango not installedzDjango version too old) �superr �setUpZrequire_TEST_MODEr �skipTestrR r� Z
addCleanupr2 �� __class__r( r) r� ] s
z_ExtensionTest.setUp)r- r. r/ r9 r� �
__classcell__r( r( r� r) r T s r ZtoomanysecretsZletmeinc @ s� e Zd ZdZdZdZeZedd� �Z dd� Z
e dfd d
�Z d d � Z
d
d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � ZdS ) r a
tests model to verify it matches django's behavior.
running this class verifies the tests correctly assert what Django itself does.
running the ExtensionBehaviorTest subclass below verifies "passlib.ext.django"
matches what the tests assert.
zverify django behaviorFc C s t �| j�S )z?
per-test CryptContext() created from .config.
)r ry r� r2 r( r( r) r| � s zDjangoBehaviorTest.contextc C s4 | � |j�d�� | �|�� � | �|�� g � dS )zO
check that user object is set to 'unusable password' constant
�!N)rt r7 rb rr �has_usable_passwordrz r5 )r3 �userr( r( r) �assert_unusable_password� s z+DjangoBehaviorTest.assert_unusable_passwordNc C sn |t u r&| �|jd� | �|jd� n| �|j|� | �|�� d|jf � | �|�� |du rbg n|g� dS )z�
check that user object has a usable password hash.
:param hash: optionally check it has this exact hash
:param saved: check that mock commit history for user.password matches this list
r� Nzhash should be usable: %r)r! �assertNotEqualr7 rz rt r� r5 )r3 r� �hash�savedr( r( r) �assert_valid_password� s
�
�z(DjangoBehaviorTest.assert_valid_passwordc C sf | j s| �d��| j}ddlm} ddlm} | �|jdd�|jdd�� ddl m} | �||� dS )z;
test extension config is loaded correctly
zextension not loadedr )r\ )r{ Trw N)
rh r� r| rD r\ r� r{ rz rL �django.contrib.auth.models)r3 �ctxr\ r{ Zcheck_password2r( r( r) �test_extension_config� s
z(DjangoBehaviorTest.test_extension_configc C sf | j }ddlm} t� }|�t� | �|�� �t|j �� | �
|� |t�}| �|�� �t|�� dS )z1
test django's default algorithm
r r? N) r| rD r@ r, r] �PASS1rt �handler�verifyr7 r� )r3 r� r@ r� r� r( r( r) �test_default_algorithm� s
z)DjangoBehaviorTest.test_default_algorithmc C s� | j }ddlm}m}m}m} t� }|�d� |j}| � |�
� � d|�� | � ||� | � |�d�� | � ||� | � |d|�� dS )zB
test how methods handle empty string as password
r �r\ r@ �is_password_usabler^ rA N)
r| rD r\ r@ r� r^ r, r] r7 rt r� r� r� )r3 r� r\ r@ r� r^ r� r� r( r( r) �test_empty_password� s
z&DjangoBehaviorTest.test_empty_passwordc C s� ddl m}m}m}m} t� }|�� | �|� t� }|�d� | �|� | � |�d�� | � |�d�� | � |�d�� | � |�t
�� | � |�t �� | �|� | � |d��
d�� | � |t
d�� | � ||j�� | �t||j� dS )zA
test how methods handle 'unusable flag' in hash
r r� N�NonerA r� )rD r\ r@ r� r^ r, Zset_unusable_passwordr� r] rr r� �WRONG1rt rb r7 � assertRaisesrE �r3 r\ r@ r� r^ r� r( r( r) �test_unusable_flag s"
z%DjangoBehaviorTest.test_unusable_flagc C s� | j }ddlm}m}m}m} t� }d|_tj rF|sF| �
t |jt � n| �
|�t �� | �|�� tj� tj r�|s�| �
t |t d� n| �
|t d�� | �
t |d� dS )z<
test how methods handle None as hash value
r r� N)rh rD r\ r@ r� r^ r, r7 r Z none_causes_check_password_errorr� � TypeErrorr� rr rz r� �empty_is_usable_password)r3 rh r\ r@ r� r^ r� r( r( r) �test_none_hash_valueA s
�
z'DjangoBehaviorTest.test_none_hash_valuec C s� ddl m}m}m}m} t� }d|_| �|�t�� | � |jd� | � |�
� g � | � |� � t j
� | �|td�� | �t|d� dS )zD
test how methods handle empty string as hash value
r r� rA N)rD r\ r@ r� r^ r, r7 rr r� rz r5 r� r r� r� rE r� r( r( r) �test_empty_hash_valuej s z(DjangoBehaviorTest.test_empty_hash_valuec C sD dD ]:}| j |d�� | �|� W d � q1 s40 Y qdS )z>
test how methods handle invalid hash values.
)z$789$foo)r� N)�subTest�_do_test_invalid_hash_value)r3 r� r( r( r) �test_invalid_hash_values� s z+DjangoBehaviorTest.test_invalid_hash_valuesc C s� ddl m}m}m}m} t� }||_| �|�t�� | � |j|� | � |�
� g � | � |� � t j
� | �|t|�� | �t||� d S )Nr r� )rD r\ r@ r� r^ r, r7 rr r� rz r5 r� r Zinvalid_is_usable_passwordr� rE )r3 r� r\ r@ r� r^ r� r( r( r) r� � s z.DjangoBehaviorTest._do_test_invalid_hash_valuec C sJ | j �� D ]:}| j|d�� | �|� W d � q
1 s:0 Y q
dS )z�
run a bunch of subtests for each hasher available in the default django setup
(as determined by reading self.context)
)�schemeN)r| �schemesr� �_do_test_available_scheme)r3 r� r( r( r) �test_available_schemes� s z)DjangoBehaviorTest.test_available_schemesc C s� | � � }| j}| j}t� }ddlm}m}m}m} |� |�}
|�
d||
� |� |�j } | rj||� � ksjJ �z t
|�} W n tjy� | �d��Y n0 t|
| j �s�J �|
jr�| �d��|s�t|
j�s�|dv s�J d| ��|�d|� | �d ��zt| \}
}W n6 t�y4 | d
�j}|� \}
}|
�r�q0�qY n0 d }t� }||_| �|�d �� | �|�|�� | � ||� | � |�|
�� | }|�r�| � |j|� | �|
� |j�� | � |� � � |
|j�� | j ||jd
� n | � ||� t!dd��r�d S t"� �#|�}||
|d�}| � |
� |
|�� | � ||
||d�� | �$|�%� |�rF|
gng � | �||||d�� | �$|�%� g � | � ||�� t"� �&| |�j'�}| �$||� d S )z�
helper to test how specific hasher behaves.
:param scheme: *passlib* name of hasher (e.g. "django_pbkdf2_sha256")
r r� ztesting scheme: %r => %rzbackend not availablezskip disabled hasher)�
django_bcryptZdjango_bcrypt_sha256Z
django_argon2z+%r scheme should always have active backendz3skipping scheme %r due to missing django dependencyz skip due to missing dependencyr� Z dontletmeinN)r� r� )�maxrB )r< )(� getLoggerr| rh r> rD r\ r@ r� r^ r� �debugrN Zdefault_schemer r ZMissingBackendErrorr� r Z is_disabledrK Z django_nameZwarning�
sample_hashes�KeyError�get_sample_hashr, r7 rr r� rt r� Zidentifyr� r r Zpasslib_to_django_namerz r= Zdjango_to_passlib_name� algorithm)r3 r� �logr� rh r< r\ r@ r� r^ r� rN ZtestcaseZsecretr� r� �otherr� Z needs_updateZalgZhash2rI r( r( r) r� � sn
�
z,DjangoBehaviorTest._do_test_available_scheme)r- r. r/ r9 �descriptionPrefixrh � stock_configr� r r| r� r! r� r� r� r� r� r� r� r� r� r� r� r( r( r( r) r z s$
%"()%
# r c s0 e Zd ZdZdZeddd�Z� fdd�Z� ZS )r z`
test that "passlib.ext.django" conforms to behavioral assertions in DjangoBehaviorTest
zverify extension behaviorz sha256_crypt,md5_crypt,des_cryptZ des_crypt)r� rN c s& t t| ��� | j| jd� d| _d S )N�r~ T)r� r r� r� r� rh r2 r� r( r) r� N s zExtensionBehaviorTest.setUp) r- r. r/ r9 r� r� r� r� r� r( r( r� r) r C s �r c @ sT e Zd ZdZdZdd� Zdd� Zdd� Zd d
� Zd d � Z d
d� Z
dd� Z dd� Z dS )r z0
test the ``passlib.ext.django`` plugin
zpasslib.ext.django pluginc C s� | j ddd� | �� | �d�� | j ddd� W d � n1 sD0 Y | �� | j ddd� | jtd� | �� | j ddd� | jtd� | �� dS ) z.test set_django_password_context patch/unpatch�disabledF�r~ r� �!PASSLIB_CONFIG=None is deprecatedN�
django-1.0r� �
django-1.4)r� rv �assertWarningListr} r r� r r2 r( r( r) �test_00_patch_controlg s , z)DjangoExtensionTest.test_00_patch_controlc C s� d}| j |d� ddlm m m} ddlm} dd� }|jj}||j_| � d�� |j
� � W d � n1 sv0 Y ||j_|j }||_ | � d �� |j
� � W d � n1 s�0 Y ||_ dS )
z(test detection of foreign monkeypatchingz [passlib]
schemes=des_crypt
r� r N)rs c S s d S r1 r( r( r( r( r) �dummy� s z>DjangoExtensionTest.test_01_overwrite_detection.<locals>.dummyz/another library has patched.*User\.set_passwordz2another library has patched.*models:check_password)
r� r� ZcontribZauthrZ r� rs r+ r] r� Z_managerZ check_allr\ )r3 r� rZ rs r� Zorigr( r( r) �test_01_overwrite_detection� s ( (z/DjangoExtensionTest.test_01_overwrite_detectionc C s ddl m} t� j}tdkr,| �t|d� n|d�}| �||j� |d�}| �||j � ddl
m } |d�}| � |j
d� |�d �}| �|�d |�� | �|�d |�� | �|�d
|�� |jd d d d
�}| � |d� | � |�|�dtd�d td�d�� | �t|d� dS )z'test Hasher-compatible handler wrappersr )r[ rU Zhex_md5r� �� sha256_cryptr� Zpasslib_sha256_crypt�stubZxxxxZabcdabcdabcdabcdi� rX zK$5$rounds=1234$abcdabcdabcdabcd$v2RWkZQzctPdejyRqmmTDQpZN6wTh7.RUy9zF2LftT6zabcdab**********z+v2RWkZ*************************************)r� ZsaltrY r� Zdoes_not_existN)r` r[ r �passlib_to_djangor r� rE ZassertIsInstanceZUnsaltedMD5PasswordHasherZBCryptPasswordHasher� passlib.hashr� rz r� �encodert r� rr Z safe_summaryr r� )r3 r[ r� rC r� Zencodedr( r( r) �test_02_handler_wrapper� s2
�� z+DjangoExtensionTest.test_02_handler_wrapperc C sZ | � d�� | jddd� W d � n1 s.0 Y | �� | jddd� | �� dS )z test PASSLIB_CONFIG='disabled'r� NFr� r� )r� r� rv r2 r( r( r) �test_11_config_disabled� s
,z+DjangoExtensionTest.test_11_config_disabledc C sP | j ddd� t}| �|� | j ddd� | �t� | j ddd� | �t� dS )z test PASSLIB_CONFIG='<preset>'zdjango-defaultF�r r� r� r� r� N)r� r
r} r r )r3 r� r( r( r) �test_12_config_presets� s
z*DjangoExtensionTest.test_12_config_presetsc C s\ ddl m} t�|�}| �� | �|� | jddd� | �|� | j|dd� | �|� dS )z$test PASSLIB_CONFIG default behaviorr )�PASSLIB_DEFAULTzpasslib-defaultFr� N)�passlib.ext.django.utilsr� r � from_stringr� r} )r3 r� r� r( r( r) �test_13_config_defaults� s
z+DjangoExtensionTest.test_13_config_defaultsc C s@ t dtd� | �ttd� | �� t dtd� | �ttd� dS )z test PASSLIB_CONFIG type checks�{ )r r~ rm zmissing-preset)r~ r N)r* r! r� r� �
__import__r� rE r2 r( r( r) �test_14_config_invalid� s
z*DjangoExtensionTest.test_14_config_invalidc s8 t dgdddd�}ddlm� � fdd �}| j|d
� | �|� d� | �|d d �d� | �|d d
�d� dd� }| j||d� | �|� d� | �|dd�d� | �|dd�d� | �|dd�d� dd� }| j||d� | �|� d� | �|dd�d� | �|dd d�d� | �|dd d�d� | jt| j|dd� dS )z#test PASSLIB_GET_CATEGORY parameterr� i� i� i� )r� Z sha256_crypt__default_roundsZ#staff__sha256_crypt__default_roundsZ'superuser__sha256_crypt__default_roundsr r� c s& t f i | ��}|�d� � �|j�jS )z;helper to take in user opts, return rounds used in passwordr� )r, r] r� r7 rY )r% r� r� r( r) �run s
z9DjangoExtensionTest.test_21_category_setting.<locals>.runr� T)�is_staff)� is_superuserc S s
| j pd S r1 ��
first_name�r� r( r( r) � get_category s zBDjangoExtensionTest.test_21_category_setting.<locals>.get_category)r r� r� r� ZstaffZ superuserc S s d S r1 r( r� r( r( r) r� % s )r� r� )r� r� �xN)r� r� r� r� rz r� r� )r3 r� r� r� r( r� r) �test_21_category_setting s> � �� �z,DjangoExtensionTest.test_21_category_settingN)
r- r. r/ r9 r� r� r� r� r� r� r� r� r� r( r( r( r) r Y s 0
r )N)Mr9 Z
__future__r r r Zloggingr� r- r� rp rF r� r Z_appsr r Z passlib.appsr r r
Zpasslib.contextr r� r r
r r Zpasslib.utils.compatr r r Zpasslib.utils.decorr Zpasslib.tests.utilsr r r Zpasslib.tests.test_handlersr �__all__rR Z django.confr r �
isinstance� RuntimeErrorZ
configuredZ configureZ django.appsZpopulate�info�objectr! r* r� r+ r, r> rK rS Zdjango21_contextr� Zdjango110_contextr� rW r� Zusingrd r� r� r r r� r� r r r r( r( r( r) �<module> sp
)
���
" L