k"g$JddlZddlZddlZddlmZddlmZddlmZddl m Z m Z m Z ddl mZmZddlmZmZddlmZdd lmZdd lmZej2d Zd Zdd ZddZddZddZeee Z!GddZ"dZ#GddZ$GddZ%GddZ&y)N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)cached_propertylazy) format_htmlformat_html_join) import_string)gettext)ngettextc4ttjSN)get_password_validatorsrAUTH_PASSWORD_VALIDATORS`/var/www/html/djangosite/lib/python3.12/site-packages/django/contrib/auth/password_validation.pyget_default_password_validatorsrs "8#D#D EErc g}|D]8} t|d}|j|di|j di:|S#t$rd}t||dzwxYw)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONSr)r ImportErrorrappendget)validator_config validators validatorklassmsgs rrrsJ% A  @!)F"34E %?)-- 2">?@ A  @4 'sYv->'>? ?  @s AAcg}| t}|D]} |j|||r t|y#t$r}|j|Yd}~Ed}~wwxYw)z Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsr errors rvalidate_passwordr*)srF"=?(!  !   x .! f%% ! MM%  !s7 AAAcX| t}|D]}t|dd}|||y)zy Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcyrr)as rz"password_changed..Dsr)rgetattr)r%r&r'r r,s rr,r,<s< "=?() "9.@/R4()rcng}| t}|D]!}|j|j#|S)zG Return a list of all help texts of all configured validators. )rr get_help_text)r' help_textsr s rpassword_validators_help_textsr4HsDJ"=?(5 )11345 rc`t|}tddd|D}|r td|SdS)z` Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • c3"K|]}|f ywrr).0 help_texts r z6_password_validators_help_text_html..[sEYYLEs z
      {}
    )r4r r )r'r3 help_itemss r#_password_validators_help_text_htmlr<Ts= 00CDJ! ME*EJ6@;}j 1GRGrc&eZdZdZddZddZdZy)MinimumLengthValidatorz< Validate that the password is of a minimum length. c||_yr) min_length)selfr@s r__init__zMinimumLengthValidator.__init__hs $rNct||jkr/ttdd|jdd|jiy)NzNThis password is too short. It must contain at least %(min_length)d character.zOThis password is too short. It must contain at least %(min_length)d characters.password_too_shortr@codeparams)lenr@rrrAr%r&s rr$zMinimumLengthValidator.validateksN x=4?? *!01OO *$doo6   +rcNtdd|jd|jizS)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.r@)rr@rAs rr2z$MinimumLengthValidator.get_help_textys/ K L OO 4?? + , ,r)r)__name__ __module__ __qualname____doc__rBr$r2rrrr>r>cs% ,rr>c\t|}|dz |z}t|}|d|zk\xr||kS)a Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )rH)r%max_similarityvaluepwd_lenlength_bound_similarity value_lens rexceeds_maximum_length_ratiorYs@0(mG,q07:E I b9n $ L5L)LLrc.eZdZdZdZedfdZddZdZy) UserAttributeSimilarityValidatora Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )username first_name last_nameemailgffffff?c@||_|dkr td||_y)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorrT)rArarTs rrBz)UserAttributeSimilarityValidator.__init__s&. C BC C,rNc |sy|j}|jD]}t||d}|rt|ts#|j}t j d||gz}|D]}t||j|rt||j|jk\sD t |jj|j}tt!ddd|iy#t$r|}Y*wxYw)Nz\W+)r.bz4The password is too similar to the %(verbose_name)s.password_too_similar verbose_namerE)lowerrar0 isinstancestrresplitrYrTr quick_ratio_meta get_fieldrfrr_) rAr%r&attribute_namerU value_lower value_parts value_partrfs rr$z)UserAttributeSimilarityValidator.validates >>#"22 ND.$7E 5# 6++-K((6;7;-GK)  /d11:#h*=IIK**+6'* JJ00@MM( *PQ3 . =   &-6'5 6s4.C?? D  D ctdS)NuHYour password can’t be too similar to your other personal information.rorKs rr2z.UserAttributeSimilarityValidator.get_help_texts V  rr)rMrNrOrPDEFAULT_USER_ATTRIBUTESrBr$r2rrrr[r[s% O'>s- @ rr[c8eZdZdZedZefdZddZdZy)CommonPasswordValidatora Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). cVttjjdz S)Nzcommon-passwords.txt.gz)r__file__resolveparentrKs rDEFAULT_PASSWORD_LIST_PATHz2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHs!H~%%'..1JJJrc|tjur |j} tj|dd5}|Dchc]}|j c}|_dddycc}w#1swYyxYw#t $rMt|5}|Dchc]}|j ncc}wc}|_dddYy#1swYYyxYwwxYw)Nrtzutf-8)encoding)rxr}gzipopenstrip passwordsOSError)rApassword_list_pathfxs rrBz CommonPasswordValidator.__init__s !8!S!S S!%!@!@  8-tgF 8!56!7!'')!7 8 8!7 8 8 8() 8Q56!7!'')!7!7 8 8 8 8scA6A*A%A*A6%A**A3/A63A66C  B>B'&B>4C >C C C Nc|jj|jvrtt ddy)NzThis password is too common.password_too_commonrF)rgrrrrorIs rr$z CommonPasswordValidator.validates< >>  ! ! #t~~ 5!01*  6rctdS)Nu2Your password can’t be a commonly used password.rurKs rr2z%CommonPasswordValidator.get_help_textsEFFrr) rMrNrOrPr r}rBr$r2rrrrxrxs3KK+E8GrrxceZdZdZddZdZy)NumericPasswordValidatorz= Validate that the password is not entirely numeric. NcP|jrttddy)Nz"This password is entirely numeric.password_entirely_numericr)isdigitrrorIs rr$z!NumericPasswordValidator.validates,    !670  rctdS)Nu*Your password can’t be entirely numeric.rurKs rr2z&NumericPasswordValidator.get_help_text s=>>rr)rMrNrOrPr$r2rrrrrs?rr)NNr)' functoolsrrjdifflibrpathlibr django.confrdjango.core.exceptionsrrrdjango.utils.functionalr r django.utils.htmlr r django.utils.module_loadingr django.utils.translationrrorcacherrr*r,r4r<ri"password_validators_help_text_htmlr>rYr[rxrrrrrs #  :;51- FF  && )  H&**Ms%S",,<M<7 7 t!G!GH ? ?r