�
XR_�N � � � S r SSKJr SSKJr SSKJrJrJr SSK r \ R " \ 5 r SSK
Jr SSKJrJrJrJr SSKJrJrJr SS KJr SS
KJrJ r J r J r SS K J r SSK!J"s J#r$ / S Qr%Sq&S
r'Sr( " S S\$RR \$RT 5 r+ " S S\$RX \+5 r- " S S\+5 r. " S S\+5 r/\$R` " S\\ " S5 \ " S5 SS9r1S\1l2 \1=Rf S -
sl3 " S S \5 r4 " S S \-5 r5 " S! S"\55 r6\$R` " S#\Rn " S$S%9\ " S&5 \ " S'5 S(S)9r8S&\8l2 \8=Rf S -
sl3 " S* S+\$Rr \$RR \$RT 5 r: " S, S-\$Rv Rx \$Rz 5 r>g).z5passlib.handlers.django- Django password hash support� )� b64encode)�hexlify)�md5�sha1�sha256N)�_wrapped_bcrypt)�argon2�bcrypt� pbkdf2_sha1�
pbkdf2_sha256)�
to_unicode�rng�
getrandstr)� BASE64_CHARS)�
str_to_uascii�
uascii_to_str�unicode�u)� pbkdf2_hmac)�django_salted_sha1�django_salted_md5�
django_bcrypt�django_pbkdf2_sha1�django_pbkdf2_sha256�
django_argon2�django_des_crypt�django_disabledc �( � [ c SSKJ q [ $ )Nr )� des_crypt)r � passlib.hash� � �9/usr/lib/python3/dist-packages/passlib/handlers/django.py�_import_des_cryptr$ & s � ���*� �r" �>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789c �V � \ rS rSrSrSrSrSr\r \
R r \
S 5 rS rSrg) �DjangoSaltedHash�2 z2base class providing common code for django hashes)�salt� salt_size� Nc �P � [ R " XR U S9u p#U " X#S9$ )N��handler�r) �checksum)�uh� parse_mc2�ident��cls�hashr) �chks r# � from_string� DjangoSaltedHash.from_stringB s# � ��L�L��y�y�#�>� ����+�+r" c �n � [ R " U R U R U R 5 $ �N)r1 �
render_mc2r3 r) r0 ��selfs r# � to_string�DjangoSaltedHash.to_stringG s! � ��}�}�T�Z�Z����D�M�M�B�Br" r! )�__name__�
__module__� __qualname__�__firstlineno__�__doc__� setting_kwds�default_salt_size�
max_salt_size�
SALT_CHARS�
salt_charsr1 �LOWER_HEX_CHARS�checksum_chars� classmethodr8 r? �__static_attributes__r! r" r# r' r' 2 sA � �<� )�L� ���M��J��'�'�N��,� �,�Cr" r' c �P � \ rS rSrSr\R S- rSr\S 5 r S r
Sr g) �DjangoVariableHash�K zEbase class providing common code for django hashes w/ variable rounds)�rounds� c �T � [ R " XR U S9u p#nU " X#US9$ )Nr- )rR r) r0 )r1 � parse_mc3r3 )r5 r6 rR r) r7 s r# r8 � DjangoVariableHash.from_stringQ s( � � �L�L��y�y�#� F���c��&�c�:�:r" c � � [ R " U R U R U R U R
5 $ r; )r1 �
render_mc3r3 rR r) r0 r= s r# r? � DjangoVariableHash.to_stringV s' � ��}�}�T�Z�Z����d�i�i�� � �O�Or" r! N) rA rB rC rD rE r' rF �
min_roundsrM r8 r? rN r! r" r# rP rP K s2 � �O�#�0�0�;�>�L��J��;� �;�Pr" rP c �: � \ rS rSrSrS rSr\" S5 rSr S r
Sr g) r �Y a} This class implements Django's Salted SHA1 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and uses a single round of SHA1.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods accept the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
This should be compatible with Django 1.4's :class:`!SHA1PasswordHasher` class.
.. versionchanged: 1.6
This class now generates 12-character salts instead of 5,
and generated salts uses the character range ``[0-9a-zA-Z]`` instead of
the ``[0-9a-f]``. This is to be compatible with how Django >= 1.4
generates these hashes; but hashes generated in this manner will still be
correctly interpreted by earlier versions of Django.
r zsha1$�( c �� � [ U[ 5 ( a UR S5 n[ [ U R
R S5 U- 5 R
5 5 $ �N�utf-8�ascii)�
isinstancer �encoder r r) � hexdigest�r> �secrets r# �_calc_checksum�!django_salted_sha1._calc_checksumy sJ � � �f�g� &� &��]�]�7�+�F� �T�$�)�)�"2�"2�7�";�f�"D� E� O� O� Q�R�Rr" r! N� rA rB rC rD rE �name� django_namer r3 �
checksum_sizerg rN r! r" r# r r Y s' � ��4 �D��K�
�g�J�E��M�Sr" r c �: � \ rS rSrSrS rSr\" S5 rSr S r
Sr g) r �~ a� This class implements Django's Salted MD5 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and uses a single round of MD5.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods accept the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
This should be compatible with the hashes generated by
Django 1.4's :class:`!MD5PasswordHasher` class.
.. versionchanged: 1.6
This class now generates 12-character salts instead of 5,
and generated salts uses the character range ``[0-9a-zA-Z]`` instead of
the ``[0-9a-f]``. This is to be compatible with how Django >= 1.4
generates these hashes; but hashes generated in this manner will still be
correctly interpreted by earlier versions of Django.
r zmd5$� c �� � [ U[ 5 ( a UR S5 n[ [ U R
R S5 U- 5 R
5 5 $ r_ )rb r rc r r r) rd re s r# rg � django_salted_md5._calc_checksum� sJ � � �f�g� &� &��]�]�7�+�F� �S����!1�!1�'�!:�V�!C� D� N� N� P�Q�Qr" r! Nri r! r" r# r r ~ s' � ��6 �D��K�
�f�I�E��M�Rr" r r zbcrypt$a� This class implements Django 1.4's BCrypt wrapper, and follows the :ref:`password-hash-api`.
This is identical to :class:`!bcrypt` itself, but with
the Django-specific prefix ``"bcrypt$"`` prepended.
See :doc:`/lib/passlib.hash.bcrypt` for more details,
the usage and behavior is identical.
This should be compatible with the hashes generated by
Django 1.4's :class:`!BCryptPasswordHasher` class.
.. versionadded:: 1.6
)�prefixr3 �docr
)rk c �z ^ � \ rS rSrSrS rSr\r\ " S5 r
\ S 5 r \ U 4S j5 r
U 4S jrU 4S jrS rU =r$ )
�django_bcrypt_sha256� a� This class implements Django 1.6's Bcrypt+SHA256 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
While the algorithm and format is somewhat different,
the api and options for this hash are identical to :class:`!bcrypt` itself,
see :doc:`bcrypt </lib/passlib.hash.bcrypt>` for more details.
.. versionadded:: 1.6.2
�
bcrypt_sha256zbcrypt_sha256$c �t � [ R " U5 nU( d gUR U R 5 $ �NF)r1 �to_unicode_for_identify�
startswith�
django_prefix�r5 r6 s r# �identify� django_bcrypt_sha256.identify� s- � ��)�)�$�/�������s� 0� 0�1�1r" c �\ >� [ USS5 nUR U R 5 ( d [ R R U 5 eU[
U R 5 S nUR S5 ( d [ R R U 5 e[ [ U ]+ U5 $ )Nra r6 z$2) r
r{ r| r1 �exc�InvalidHashError�len�MalformedHashError�superru r8 )r5 r6 �bhash� __class__s �r# r8 � django_bcrypt_sha256.from_string� s� �� ��$���0�����s� 0� 0�1�1��&�&�)�)�#�.� .��S��*�*�+�,�-��� � ��%�%��&�&�+�+�C�0� 0��)�3�;�E�B�Br" c �X >� [ [ U ] 5 n[ U R 5 U- $ r; )r� ru r? r r| )r> r� r� s �r# r? � django_bcrypt_sha256.to_string� s) �� ��*�D�;�=�� �T� /� /�0�5�8�8r" c �� >� [ U[ 5 ( a UR S5 n[ U R U5 R 5 5 n[ [ U ]# U5 $ )Nr` ) rb r rc r �_digest�digestr� ru rg )r> rf r� s �r# rg �#django_bcrypt_sha256._calc_checksum� sM �� � �f�g� &� &��]�]�7�+�F��� � �f�-�4�4�6�7���)�4�?��G�Gr" r! )rA rB rC rD rE rj rk r r� r r| rM r~ r8 r? rg rN �
__classcell__)r� s @r# ru ru � s_ �� � � "�D�!�K��G� �&�'�M��2� �2� �C� �C�9�H� Hr" ru c �v � \ rS rSrSrS rSr\" S5 rSr Sr
\ R r
Sr\R rSrS rS
rg ) r � a$ This class implements Django's PBKDF2-HMAC-SHA256 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 29000, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
This should be compatible with the hashes generated by
Django 1.4's :class:`!PBKDF2PasswordHasher` class.
.. versionadded:: 1.6
r zpbkdf2_sha256$rS l �� �, r c � � [ U R XR U R 5 n[ U5 R 5 R
S5 $ )Nra )r r� r) rR r �rstrip�decode)r> rf r6 s r# rg �#django_pbkdf2_sha256._calc_checksum# s: � ��4�<�<����D�K�K�H�����%�%�'�.�.�w�7�7r" r! N)rA rB rC rD rE rj rk r r3 �
min_salt_size�
max_roundsr1 �PADDED_BASE64_CHARSrL rl r �default_roundsr� rg rN r! r" r# r r � sN � �"�F "�D�!�K�
� � �E��M��J��+�+�N��M�"�1�1�N��G�8r" r c �P � \ rS rSrSrS rSr\" S5 rSr \
R r Sr Sr
g) r i( a' This class implements Django's PBKDF2-HMAC-SHA1 hash, and follows the :ref:`password-hash-api`.
It supports a variable-length salt, and a variable number of rounds.
The :meth:`~passlib.ifc.PasswordHash.using` method accepts the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, a 12 character one will be autogenerated (this is recommended).
If specified, may be any series of characters drawn from the regexp range ``[0-9a-zA-Z]``.
:type salt_size: int
:param salt_size:
Optional number of characters to use when autogenerating new salts.
Defaults to 12, but can be any positive value.
:type rounds: int
:param rounds:
Optional number of rounds to use.
Defaults to 131000, but must be within ``range(1,1<<32)``.
:type relaxed: bool
:param relaxed:
By default, providing an invalid value for one of the other
keywords will result in a :exc:`ValueError`. If ``relaxed=True``,
and the error can be corrected, a :exc:`~passlib.exc.PasslibHashWarning`
will be issued instead. Correctable errors include ``rounds``
that are too small or too large, and ``salt`` strings that are too long.
This should be compatible with the hashes generated by
Django 1.4's :class:`!PBKDF2SHA1PasswordHasher` class.
.. versionadded:: 1.6
r z pbkdf2_sha1$� r r! N)rA rB rC rD rE rj rk r r3 rl r r� r� rN r! r" r# r r ( s3 � �"�F �D� �K�
�n� �E��M� �/�/�N��Gr" r r �I)�typer zargon2$argon2i$a� This class implements Django 1.10's Argon2 wrapper, and follows the :ref:`password-hash-api`.
This is identical to :class:`!argon2` itself, but with
the Django-specific prefix ``"argon2$"`` prepended.
See :doc:`argon2 </lib/passlib.hash.argon2>` for more details,
the usage and behavior is identical.
This should be compatible with the hashes generated by
Django 1.10's :class:`!Argon2PasswordHasher` class.
.. versionadded:: 1.7
)rj �wrappedrr r3 rs c � � \ rS rSrSrS rSrSr\" S5 r \
R =r r
SrS=rrSrS r\S
5 rS rS rS
rg)r it a� This class implements Django's :class:`des_crypt` wrapper, and follows the :ref:`password-hash-api`.
It supports a fixed-length salt.
The :meth:`~passlib.ifc.PasswordHash.hash` and :meth:`~passlib.ifc.PasswordHash.genconfig` methods accept the following optional keywords:
:type salt: str
:param salt:
Optional salt string.
If not specified, one will be autogenerated (this is recommended).
If specified, it must be 2 characters, drawn from the regexp range ``[./0-9A-Za-z]``.
:param bool truncate_error:
By default, django_des_crypt will silently truncate passwords larger than 8 bytes.
Setting ``truncate_error=True`` will cause :meth:`~passlib.ifc.PasswordHash.hash`
to raise a :exc:`~passlib.exc.PasswordTruncateError` instead.
.. versionadded:: 1.7
This should be compatible with the hashes generated by
Django 1.4's :class:`!CryptPasswordHasher` class.
Note that Django only supports this hash on Unix systems
(though :class:`!django_des_crypt` is available cross-platform
under Passlib).
.. versionchanged:: 1.6
This class will now accept hashes with empty salt strings,
since Django 1.4 generates them this way.
�crypt)r) r* �truncate_errorzcrypt$� � � Tc �� � [ R " XR U S9u p#U( a> U( d US S nO,US S US S :w a [ R R U S5 eUSS nU " X#S9$ )Nr- r� z0first two digits of salt and checksum must matchr/ )r1 r2 r3 r� r� r4 s r# r8 � django_des_crypt.from_string� sw � ��L�L��y�y�#�>� �� �� �2�A�w���b�q��S��!�W�$� �f�f�/�/��F�H� H� �a�b�'�C���+�+r" c �� � U R nUS S U R - nU R ( a! [ R " U R
X5 $ [ R " U R
SU5 $ )Nr� � )r) r0 �use_duplicate_saltr1 r< r3 )r> r) r7 s r# r? �django_des_crypt.to_string� sV � ��y�y���2�A�h�� � �&�� � "� "��=�=����T�7� 7� �=�=����R��5� 5r" c � � [ c
[ 5 U R ( a U R U5 [ U R S S S9R U5 $ )Nr� )r) )r r$ � use_defaults�_check_truncate_policyr) rg re s r# rg � django_des_crypt._calc_checksum� sG � � � � � � � � � � '� '�� /��d�i�i���m�,�;�;�F�C�Cr" r! N)rA rB rC rD rE rj rk rF r r3 r1 � HASH64_CHARSrL rJ rl r� rG �
truncate_sizer� rM r8 r? rg rN r! r" r# r r t si � � �: �D��K�:�L�
�h�K�E�"$�/�/�1�N�Z��M�()�)�M�%��M� ���,� �,�$6� Dr" r c �V � \ rS rSrSrS r\" S5 rSr\ S 5 r
S r \ S 5 r Sr
g )
r i� a This class provides disabled password behavior for Django, and follows the :ref:`password-hash-api`.
This class does not implement a hash, but instead
claims the special hash string ``"!"`` which Django uses
to indicate an account's password has been disabled.
* newly encrypted passwords will hash to ``"!"``.
* it rejects all passwords.
.. note::
Django 1.6 prepends a randomly generated 40-char alphanumeric string
to each unusuable password. This class recognizes such strings,
but for backwards compatibility, still returns ``"!"``.
See `<https://code.djangoproject.com/ticket/20079>`_ for why
Django appends an alphanumeric string.
.. versionchanged:: 1.6.2 added Django 1.6 support
.. versionchanged:: 1.7 started appending an alphanumeric string.
�!r] c �d � [ R " U5 nUR U R 5 $ r; )r1 rz r{ � _hash_prefixr} s r# r~ �django_disabled.identify� s' � ��)�)�$�/�����s� /� /�0�0r" c �F � [ [ [ S S U R 5 $ )N���)r r r �
suffix_lengthre s r# rg � django_disabled._calc_checksum� s � ��#�|�C�R� 0�$�2D�2D�E�Er" c � � [ R " U5 U R U5 ( d [ R R U 5 egry )r1 �validate_secretr~ r� r� )r5 rf r6 s r# �verify�django_disabled.verify� s7 � �
���6�"��|�|�D�!�!��&�&�)�)�#�.� .�r" r! N)rA rB rC rD rE rj r r� r� rM r~ rg r� rN r! r" r# r r � sJ � ��, �D��S�6�L��M� �1� �1�F� �� �r" r )?rE �base64r �binasciir �hashlibr r r �logging� getLoggerrA �log�passlib.handlers.bcryptr r r r
r r �
passlib.utilsr
r r �passlib.utils.binaryr �passlib.utils.compatr r r r �passlib.crypto.digestr �passlib.utils.handlers�utils�handlersr1 �__all__r r$ rI �HasSalt�GenericHandlerr' � HasRoundsrP r r �
PrefixWrapperr rk �_using_clone_attrsru r r �usingr �
TruncateMixinr �ifc� DisabledHash�
StaticHandlerr r! r" r# �<module>r� s� �� ;�
� � %� %� �g�'�'��1�� 4� C� C� 5� 5� -� I� I� -� #� #� ��
� �� N�
�
C�r�z�z�2�#4�#4� C�2 P�� � �'7� P� #S�)� #S�J$R�(� $R�T � � � �&� �Y�<�q��|� � �
�" %�
� �
� � �$4� 4� � /H�?� /H�j18�-� 18�f)�-� )�d � � � � �L�L�c� "� �X�;�
� �
� � �
�( %�
� �
� � �$4� 4� �
\D�r�'�'����R�5F�5F� \D�|*�b�f�f�)�)�2�+;�+;� *r"