/usr/local/lib/python3.9/site-packages/django/core/__pycache__
a Ӱ�hh% � @ s> d Z ddlZddlZddlZddlZddlZddlZddlmZ ddl m Z m Z ddl m Z ddlmZ ddlmZ ddlmZ ed �Zd ZG d d � d e�ZG d d� de�Zdd� Zdd� Zdd� Zdd� Z d+dd�Z dd� Z d,d d �Z G d d � d �Z dd!e d"fd#d$�Z!dd!e ddfd%d&�Z"G d'd(� d(�Z#G d)d*� d*e#�Z$dS )-a_ Functions for creating and restoring url-safe signed JSON objects. The format used looks like this: >>> signing.dumps("hello") 'ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv422nZA4sgmk' There are two components here, separated by a ':'. The first component is a URLsafe base64 encoded JSON of the object passed to dumps(). The second component is a base64 encoded hmac/SHA-256 hash of "$first_component:$secret" signing.loads(s) checks the signature and returns the deserialized object. If the signature fails, a BadSignature exception is raised. >>> signing.loads("ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv422nZA4sgmk") 'hello' >>> signing.loads("ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv42-modified") ... BadSignature: Signature "ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv42-modified" does not match You can optionally compress the JSON prior to base64 encoding it to save space, using the compress=True argument. This checks if compression actually helps and only applies compression if the result is a shorter string: >>> signing.dumps(list(range(1, 20)), compress=True) '.eJwFwcERACAIwLCF-rCiILN47r-GyZVJsNgkxaFxoDgxcOHGxMKD_T7vhAml:1QaUaL:BA0thEZrp4FQVXIXuOvYJtLJSrQ' The fact that the string is compressed is signalled by the prefixed '.' at the start of the base64 JSON. There are 65 url-safe characters: the 64 used by url-safe base64 and the ':'. These functions make use of all of them. � N)�settings)�constant_time_compare� salted_hmac)�RemovedInDjango51Warning�� force_bytes)� import_string)�_lazy_re_compilez^[A-z0-9-_=]*$Z>0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzc @ s e Zd ZdZdS )� BadSignaturezSignature does not match.N��__name__� __module__� __qualname__�__doc__� r r �=/usr/local/lib/python3.9/site-packages/django/core/signing.pyr 6 s r c @ s e Zd ZdZdS )�SignatureExpiredz3Signature timestamp is older than required max_age.Nr r r r r r < s r c C sT | dkr dS | dk rdnd}t | �} d}| dkrLt| d�\} }t| | }q(|| S )Nr �0�-� �> )�abs�divmod�BASE62_ALPHABET)�s�sign�encoded� remainderr r r � b62_encodeB s r c C sT | dkr dS d}| d dkr,| dd � } d}d}| D ]}|d t �|� }q4|| S )Nr r � r ���r )r �index)r r �decoded�digitr r r � b62_decodeN s r$ c C s t �| ��d�S )N� =)�base64�urlsafe_b64encode�strip)r r r r � b64_encode[ s r) c C s dt | � d }t�| | �S )Nr% � )�lenr& �urlsafe_b64decode)r �padr r r � b64_decode_ s r. �sha1c C s t t| |||d��� ��� S )N�� algorithm)r) r �digest�decode)�salt�value�keyr1 r r r � base64_hmacd s �r7 c C s dt | � S )Ns django.http.cookiesr )r6 r r r �_cookie_signer_keyj s r8 �%django.core.signing.get_cookie_signerc C s& t tj�}|ttj�tttj�| d�S )N)r6 � fallback_keysr4 )r r ZSIGNING_BACKENDr8 � SECRET_KEY�map�SECRET_KEY_FALLBACKS)r4 �Signerr r r �get_cookie_signero s �r? c @ s e Zd ZdZdd� Zdd� ZdS )�JSONSerializerzW Simple wrapper around json to be used in signing.dumps and signing.loads. c C s t j|dd��d�S )N)�,�:)� separators�latin-1)�json�dumps�encode)�self�objr r r rF ~ s zJSONSerializer.dumpsc C s t �|�d��S )NrD )rE �loadsr3 )rH �datar r r rJ � s zJSONSerializer.loadsN)r r r r rF rJ r r r r r@ x s r@ zdjango.core.signingFc C s t ||d�j| ||d�S )a� Return URL-safe, hmac signed base64 compressed JSON string. If key is None, use settings.SECRET_KEY instead. The hmac algorithm is the default Signer algorithm. If compress is True (not the default), check if compressing using zlib can save some space. Prepend a '.' to signify compression. This is included in the signature, to protect against zip bombs. Salt can be used to namespace the hash, so that a signed string is only valid for a given namespace. Leaving this at the default value or re-using a salt value across different parts of your application without good cause is a security risk. The serializer is expected to return a bytestring. )r6 r4 )� serializer�compress)�TimestampSigner� sign_object)rI r6 r4 rL rM r r r rF � s �rF c C s t |||d�j| ||d�S )z| Reverse of dumps(), raise BadSignature if signature fails. The serializer is expected to accept a bytestring. )r6 r4 r: )rL �max_age)rN � unsign_object)r r6 r4 rL rP r: r r r rJ � s ��rJ c @ sV e Zd Zdddddd�dd�Zddd�Zdd � Zd d � Zed fd d�Zefdd�Z dS )r> NrB �r6 �sepr4 r1 r: c G s� |pt j| _|d ur|nt j| _|| _|p<d| jj| jjf | _ |pFd| _ |r�t j d| jj� d�t dd� t|g d��D ] \}}|s�|dkrxt| ||� qxt�| j�r�td | ��d S ) Nz%s.%s�sha256z Passing positional arguments to z is deprecated.� )� stacklevelrR rS zJUnsafe Signer separator: %r (cannot be empty or consist of only A-z0-9-_=))r r; r6 r= r: rS � __class__r r r4 r1 �warnings�warnr �zip�setattr� _SEP_UNSAFE�match� ValueError) rH r6 rS r4 r1 r: �args�arg�attrr r r �__init__� s8 ��� �� ��zSigner.__init__c C s" |p| j }t| jd ||| jd�S )NZsignerr0 )r6 r7 r4 r1 )rH r5 r6 r r r � signature� s zSigner.signaturec C s d|| j | �|�f S �Nz%s%s%s)rS rc �rH r5 r r r r � s z Signer.signc C sh | j |vrtd| j ��|�| j d�\}}| jg| j�D ] }t|| �||��r8| S q8td| ��d S )NzNo "%s" found in valuer z Signature "%s" does not match)rS r �rsplitr6 r: r rc )rH Z signed_valuer5 �sigr6 r r r �unsign� s z Signer.unsignFc C s\ |� � |�}d}|r:t�|�}t|�t|�d k r:|}d}t|��� }|rRd| }| �|�S )ae Return URL-safe, hmac signed base64 compressed JSON string. If compress is True (not the default), check if compressing using zlib can save some space. Prepend a '.' to signify compression. This is included in the signature, to protect against zip bombs. The serializer is expected to return a bytestring. Fr T�.)rF �zlibrM r+ r) r3 r )rH rI rL rM rK Z is_compressed� compressed�base64dr r r rO � s zSigner.sign_objectc K sX | j |fi |���� }|d d� dk}|r6|dd � }t|�}|rLt�|�}|� �|�S )Nr � .)rh rG r. rj � decompressrJ )rH Z signed_objrL �kwargsrl rn rK r r r rQ s zSigner.unsign_object)N) r r r rb rc r rh r@ rO rQ r r r r r> � s � ( r> c s2 e Zd Zdd� Z� fdd�Zd� fdd� Z� ZS ) rN c C s t tt�� ��S )N)r �int�time)rH r r r � timestamp s zTimestampSigner.timestampc s d|| j | �� f }t� �|�S rd )rS rr �superr re �rW r r r s zTimestampSigner.signNc sj t � �|�}|�| jd�\}}t|�}|durft|tj�rB|�� }t � � | }||krft d||f ��|S )zk Retrieve original value and check it wasn't signed more than max_age seconds ago. r Nz Signature age %s > %s seconds) rs rh rf rS r$ � isinstance�datetime� timedelta� total_secondsrq r )rH r5 rP �resultrr Zagert r r rh s zTimestampSigner.unsign)N)r r r rr r rh � __classcell__r r rt r rN s rN )r/ )r9 )%r r& rv rE rq rX rj Z django.confr Zdjango.utils.cryptor r Zdjango.utils.deprecationr Zdjango.utils.encodingr Zdjango.utils.module_loadingr Zdjango.utils.regex_helperr r\ r � Exceptionr r r r$ r) r. r7 r8 r? r@ rF rJ r> rN r r r r �<module> sD # � � d
.
Edit
..
Edit
__init__.cpython-39.pyc
Edit
asgi.cpython-39.pyc
Edit
exceptions.cpython-39.pyc
Edit
paginator.cpython-39.pyc
Edit
signals.cpython-39.pyc
Edit
signing.cpython-39.pyc
Edit
validators.cpython-39.pyc
Edit
wsgi.cpython-39.pyc
Edit