Ë
    ¹ûàg$[  ã                   óø  — d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlmZ d dl	m
Z
 d dlmZ d dlmZ d dlmZmZmZmZ d dlmZ d dlmZ d	Zd
Zd„ Zd'd„Zd(d„Zd(d„Zd(d„Zej@                  d„ «       Z!ej@                  d„ «       Z" ee«      d„ «       Z#d'd„Z$d„ Z%d)d„Z&d„ Z' G d„ d«      Z( G d„ de(«      Z) G d„ de)«      Z* G d„ de(«      Z+ G d„ d e(«      Z, G d!„ d"e,«      Z- G d#„ d$e(«      Z. G d%„ d&e(«      Z/y)*é    N)Úsettings)ÚImproperlyConfigured)Úsetting_changed)Úreceiver)ÚRANDOM_STRING_CHARSÚconstant_time_compareÚget_random_stringÚpbkdf2)Úimport_string)Úgettext_noopú!é(   c                 ó:   — | du xs | j                  t        «       S )zv
    Return True if this password wasn't generated by
    User.set_unusable_password(), i.e. make_password(None).
    N)Ú
startswithÚUNUSABLE_PASSWORD_PREFIX)Úencodeds    úY/var/www/skyplay_api_hub/venv/lib/python3.12/site-packages/django/contrib/auth/hashers.pyÚis_password_usabler      s"   € ð
 �dˆ?ÒN '×"4Ñ"4Ô5MÓ"NÐNÐNó    c                 ód  — | du xs t        |«       }t        |«      }	 t        |«      }|rt	        t        t        «      «       yj                  |j                  k7  }|xs |j                  |«      }|j                  | |«      }|s|s|r|j                  | |«       ||fS # t        $ r d}Y Œ„w xY w)z¦
    Return two booleans. The first is whether the raw password matches the
    three part encoded digest, and the second whether to regenerate the
    password.
    NT)FF)r   Ú
get_hasherÚidentify_hasherÚ
ValueErrorÚmake_passwordr	   ÚUNUSABLE_PASSWORD_SUFFIX_LENGTHÚ	algorithmÚmust_updateÚverifyÚharden_runtime)Úpasswordr   Ú	preferredÚfake_runtimeÚhasherÚhasher_changedr   Ú
is_corrects           r   Úverify_passwordr&   $   sÃ   € ð ˜tÐ#ÒFÔ+=¸gÓ+FÐ'F€Lä˜9Ó%€IðÜ  Ó)ˆñ
 ô 	Ô'Ô(GÓHÔIØà×%Ñ%¨×)<Ñ)<Ñ<€NØ ÒB I×$9Ñ$9¸'Ó$B€KØ—‘˜x¨Ó1€Jñ ™n±Ø×Ñ˜h¨Ô0à�{Ð"Ð"øô- ò àŠðús   ŸB! Â!B/Â.B/c                 óD   — t        | ||¬«      \  }}|r|r
|r || «       |S )z¼
    Return a boolean of whether the raw password matches the three part encoded
    digest.

    If setter is specified, it'll be called when you need to regenerate the
    password.
    ©r!   ©r&   ©r    r   Úsetterr!   r%   r   s         r   Úcheck_passwordr,   H   s,   € ô .¨h¸È9ÔUÑ€J�Ù‘*¡ÙˆxÔØÐr   c              ƒ   ó`   K  — t        | ||¬«      \  }}|r|r|r || «      ƒ d{  –—†  |S 7 Œ­w)zSee check_password().r(   Nr)   r*   s         r   Úacheck_passwordr.   V   s9   è ø€ ä-¨h¸È9ÔUÑ€J�Ù‘*¡Ù�XÓ×ÐØÐð 	ús   ‚#.¥,¦.c                 ó  — | €t         t        t        «      z   S t        | t        t
        f«      s!t        dt        | «      j                  z  «      ‚t        |«      }|xs |j                  «       }|j                  | |«      S )a|  
    Turn a plain-text password into a hash for database storage

    Same as encode() but generate a new random salt. If password is None then
    return a concatenation of UNUSABLE_PASSWORD_PREFIX and a random string,
    which disallows logins. Additional random string reduces chances of gaining
    access to staff or superuser accounts. See ticket #20079 for more info.
    z+Password must be a string or bytes, got %s.)r   r	   r   Ú
isinstanceÚbytesÚstrÚ	TypeErrorÚtypeÚ__qualname__r   ÚsaltÚencode)r    r6   r#   s      r   r   r   ^   s~   € ð ÐÜ'Ô*;Ü+ó+
ñ 
ð 	
ô �h¤¬ Ô-ÜØ9¼DÀ»N×<WÑ<WÑWó
ð 	
ô ˜Ó€FØÒ �6—;‘;“=€DØ�=‰=˜ 4Ó(Ð(r   c                  ó®   — g } t         j                  D ]?  }t        |«      } |«       }t        |d«      st	        d|z  «      ‚| j                  |«       ŒA | S )Nr   z,hasher doesn't specify an algorithm name: %s)r   ÚPASSWORD_HASHERSr   Úgetattrr   Úappend)ÚhashersÚhasher_pathÚ
hasher_clsr#   s       r   Úget_hashersr?   t   sa   € à€GÜ×0Ñ0ò ˆÜ" ;Ó/ˆ
Ù“ˆÜ�v˜{Ô+Ü&Ø>ÀÑLóð ð 	�‰�vÕðð €Nr   c                  óR   — t        «       D � ci c]  } | j                  | “Œ c} S c c} w ©N)r?   r   )r#   s    r   Úget_hashers_by_algorithmrB   ‚   s#   € ä3>³=ÖA¨ˆF×Ñ˜fÑ$ÒAÐAùÒAs   �$c                 ó`   — | dk(  r)t         j                  «        t        j                  «        y y )Nr9   )r?   Úcache_clearrB   )ÚsettingÚkwargss     r   Úreset_hashersrG   ‡   s(   € àÐ$Ò$Ü×ÑÔ!Ü ×,Ñ,Õ.ð %r   c                 ó˜   — t        | d«      r| S | dk(  rt        «       d   S t        «       }	 ||    S # t        $ r t	        d| z  «      ‚w xY w)zÂ
    Return an instance of a loaded password hasher.

    If algorithm is 'default', return the default hasher. Lazily import hashers
    specified in the project's settings file if needed.
    r   Údefaultr   z\Unknown password hashing algorithm '%s'. Did you specify it in the PASSWORD_HASHERS setting?)Úhasattrr?   rB   ÚKeyErrorr   )r   r<   s     r   r   r   Ž   sl   € ô ˆy˜+Ô&ØÐà	�iÒ	Ü‹}˜QÑÐô +Ó,ˆð	Ø˜9Ñ%Ð%øÜò 	Üðà&ñ'óð ð	ús	   ¬1 ±A	c                 ó  — t        | «      dk(  rd| vst        | «      dk(  r| j                  d«      rd}t        |«      S t        | «      dk(  r| j                  d«      rd}t        |«      S | j                  dd	«      d
   }t        |«      S )zó
    Return an instance of a loaded password hasher.

    Identify hasher algorithm by examining encoded hash, and call
    get_hasher() to return hasher. Raise ValueError if
    algorithm cannot be identified, or if hasher is not loaded.
    é    ú$é%   zmd5$$Úunsalted_md5é.   zsha1$$Úunsalted_sha1é   r   )Úlenr   Úsplitr   )r   r   s     r   r   r   §   s‘   € ô 	ˆG‹˜Ò˜s¨'Ñ1ÜˆG‹˜Ò˜w×1Ñ1°'Ô:à"ˆ	ô �iÓ Ð ô	 
ˆW‹˜Ò	 × 2Ñ 2°8Ô <Ø#ˆ	ô �iÓ Ð ð —M‘M # qÓ)¨!Ñ,ˆ	Ü�iÓ Ð r   c                 ó8   — | d| }||t        | |d «      z  z  }|S )z‡
    Return the given hash, with only the first ``show`` number shown. The
    rest are masked with ``char`` for security reasons.
    N)rT   )ÚhashÚshowÚcharÚmaskeds       r   Ú	mask_hashr[   ½   s.   € ð
 �%�4ˆ[€FØ
ˆd”S˜˜d˜e˜Ó%Ñ%Ñ%€FØ€Mr   c                 ód   — t        | «      t        j                  t        t        «      «      z  |k  S rA   )rT   ÚmathÚlog2r   )r6   Úexpected_entropys     r   Úmust_update_saltr`   Ç   s&   € äˆt‹9”t—y‘y¤Ô%8Ó!9Ó:Ñ:Ð=MÑMÐMr   c                   óR   — e Zd ZdZdZdZdZd„ Zd„ Zd„ Z	d„ Z
d„ Zd	„ Zd
„ Zd„ Zd„ Zy)ÚBasePasswordHasherzÌ
    Abstract base class for password hashers

    When creating your own hasher, you need to override algorithm,
    verify(), encode() and safe_summary().

    PasswordHasher objects are immutable.
    Né€   c                 ór  — | j                   �Tt        | j                   t        t        f«      r| j                   \  }}n| j                   }	 t	        j
                  |«      }|S t        d| j                  j                  z  «      ‚# t        $ r*}t        d| j                  j                  ›d|›�«      ‚d }~ww xY w)NzCouldn't load z algorithm library: z-Hasher %r doesn't specify a library attribute)
Úlibraryr0   ÚtupleÚlistÚ	importlibÚimport_moduleÚImportErrorr   Ú	__class__Ú__name__)ÚselfÚnameÚmod_pathÚmoduleÚes        r   Ú_load_libraryz BasePasswordHasher._load_libraryÚ   s¢   € Ø�<‰<Ð#Ü˜$Ÿ,™,¬´¨Ô6Ø!%§¡‘�‘hàŸ<™<�ðÜ"×0Ñ0°Ó:�ð ˆMÜØ;¸d¿n¹n×>UÑ>UÑUó
ð 	
øô ò Ý à—~‘~×.Ó.±ð3óð ûðús   Á
B Â	B6Â%B1Â1B6c                 ó¨   — t        j                  | j                  t        j                  t	        t
        «      «      z  «      }t        |t
        ¬«      S )z‚
        Generate a cryptographically secure nonce salt in ASCII with an entropy
        of at least `salt_entropy` bits.
        )Úallowed_chars)r]   ÚceilÚsalt_entropyr^   rT   r   r	   )rm   Ú
char_counts     r   r6   zBasePasswordHasher.saltì   s:   € ô —Y‘Y˜t×0Ñ0´4·9±9¼SÔATÓ=UÓ3VÑVÓWˆ
Ü  Ô;NÔOÐOr   c                 ó   — t        d«      ‚)z'Check if the given password is correct.z?subclasses of BasePasswordHasher must provide a verify() method©ÚNotImplementedError©rm   r    r   s      r   r   zBasePasswordHasher.verifyö   s   € ä!ØMó
ð 	
r   c                 ó@   — |€t        d«      ‚|rd|v rt        d«      ‚y )Nzpassword must be provided.rN   z+salt must be provided and cannot contain $.)r3   r   ©rm   r    r6   s      r   Ú_check_encode_argsz%BasePasswordHasher._check_encode_argsü   s.   € ØÐÜÐ8Ó9Ð9Ù�s˜d‘{ÜÐJÓKÐKð #r   c                 ó   — t        d«      ‚)z¥
        Create an encoded database value.

        The result is normally formatted as "algorithm$salt$hash" and
        must be fewer than 128 characters.
        z@subclasses of BasePasswordHasher must provide an encode() methodry   r}   s      r   r7   zBasePasswordHasher.encode  s   € ô "ØNó
ð 	
r   c                 ó   — t        d«      ‚)zã
        Return a decoded database value.

        The result is a dictionary and should contain `algorithm`, `hash`, and
        `salt`. Extra keys can be algorithm specific like `iterations` or
        `work_factor`.
        z@subclasses of BasePasswordHasher must provide a decode() method.ry   ©rm   r   s     r   ÚdecodezBasePasswordHasher.decode  s   € ô "ØNó
ð 	
r   c                 ó   — t        d«      ‚)zÎ
        Return a summary of safe values.

        The result is a dictionary and will be used where the password field
        must be displayed to construct a safe representation of the password.
        zEsubclasses of BasePasswordHasher must provide a safe_summary() methodry   r�   s     r   Úsafe_summaryzBasePasswordHasher.safe_summary  s   € ô "ØSó
ð 	
r   c                  ó   — y)NF© r�   s     r   r   zBasePasswordHasher.must_update$  s   € Ør   c                 ó.   — t        j                  d«       y)aõ  
        Bridge the runtime gap between the work factor supplied in `encoded`
        and the work factor suggested by this hasher.

        Taking PBKDF2 as an example, if `encoded` contains 20000 iterations and
        `self.iterations` is 30000, this method should run password through
        another 10000 iterations of PBKDF2. Similar approaches should exist
        for any hasher that has a work factor. If not, this method should be
        defined as a no-op to silence the warning.
        zIsubclasses of BasePasswordHasher should provide a harden_runtime() methodN)ÚwarningsÚwarnr{   s      r   r   z!BasePasswordHasher.harden_runtime'  s   € ô 	�‰ØWõ	
r   )rl   Ú
__module__r5   Ú__doc__r   re   rv   rr   r6   r   r~   r7   r‚   r„   r   r   r†   r   r   rb   rb   Ì   sG   „ ñð €IØ€GØ€Lò
ò$Pò
òLò	
ò

ò	
òó
r   rb   c                   óV   — e Zd ZdZdZdZej                  Zdd„Z	d„ Z
d„ Zd„ Zd	„ Zd
„ Zy)ÚPBKDF2PasswordHashera  
    Secure password hashing using the PBKDF2 algorithm (recommended)

    Configured to use PBKDF2 + HMAC + SHA256.
    The result is a 64 byte binary string.  Iterations may be changed
    safely but you must rename the algorithm if you change SHA256.
    Úpbkdf2_sha256ipF Nc                 ó  — | j                  ||«       |xs | j                  }t        |||| j                  ¬«      }t	        j
                  |«      j                  d«      j                  «       }d| j                  |||fz  S )N)ÚdigestÚasciiz%s$%d$%s$%s)	r~   Ú
iterationsr
   r�   Úbase64Ú	b64encoder‚   Ústripr   )rm   r    r6   r’   rW   s        r   r7   zPBKDF2PasswordHasher.encodeD  sp   € Ø×Ñ ¨$Ô/ØÒ2 4§?¡?ˆ
Ü�h  j¸¿¹ÔEˆÜ×Ñ Ó%×,Ñ,¨WÓ5×;Ñ;Ó=ˆØ §¡°
¸DÀ$ÐGÑGÐGr   c                 ór   — |j                  dd«      \  }}}}|| j                  k(  sJ ‚||t        |«      |dœS )NrN   é   )r   rW   r’   r6   ©rU   r   Úint)rm   r   r   r’   r6   rW   s         r   r‚   zPBKDF2PasswordHasher.decodeK  sG   € Ø,3¯M©M¸#¸qÓ,AÑ)ˆ	�:˜t TØ˜DŸN™NÒ*Ð*Ð*à"ØÜ˜j›/Øñ	
ð 	
r   c                 ón   — | j                  |«      }| j                  ||d   |d   «      }t        ||«      S ©Nr6   r’   ©r‚   r7   r   ©rm   r    r   ÚdecodedÚ	encoded_2s        r   r   zPBKDF2PasswordHasher.verifyU  s8   € Ø—+‘+˜gÓ&ˆØ—K‘K ¨'°&©/¸7À<Ñ;PÓQˆ	Ü$ W¨iÓ8Ð8r   c                 ó¼   — | j                  |«      }t        d«      |d   t        d«      |d   t        d«      t        |d   «      t        d«      t        |d   «      iS )Nr   r’   r6   rW   ©r‚   Ú_r[   ©rm   r   rž   s      r   r„   z!PBKDF2PasswordHasher.safe_summaryZ  sZ   € Ø—+‘+˜gÓ&ˆäˆk‹N˜G KÑ0Üˆl‹O˜W \Ñ2Üˆf‹I”y ¨¡Ó1Üˆf‹I”y ¨¡Ó1ð	
ð 	
r   c                 ó‚   — | j                  |«      }t        |d   | j                  «      }|d   | j                  k7  xs |S r›   )r‚   r`   rv   r’   )rm   r   rž   Úupdate_salts       r   r   z PBKDF2PasswordHasher.must_updatec  s?   € Ø—+‘+˜gÓ&ˆÜ& w¨v¡¸×8IÑ8IÓJˆØ˜Ñ%¨¯©Ñ8ÒH¸[ÐHr   c                 ó‚   — | j                  |«      }| j                  |d   z
  }|dkD  r| j                  ||d   |«       y y )Nr’   r   r6   )r‚   r’   r7   )rm   r    r   rž   Úextra_iterationss        r   r   z#PBKDF2PasswordHasher.harden_runtimeh  sF   € Ø—+‘+˜gÓ&ˆØŸ?™?¨W°\Ñ-BÑBÐØ˜aÒØ�K‰K˜ '¨&¡/Ð3CÕDð  r   rA   )rl   rŠ   r5   r‹   r   r’   ÚhashlibÚsha256r�   r7   r‚   r   r„   r   r   r†   r   r   r�   r�   7  s=   „ ñð  €IØ€JØ�^‰^€FóHò
ò9ò

òIó
Er   r�   c                   ó,   — e Zd ZdZdZej                  Zy)ÚPBKDF2SHA1PasswordHasherzË
    Alternate PBKDF2 hasher which uses SHA1, the default PRF
    recommended by PKCS #5. This is compatible with other
    implementations of PBKDF2, such as openssl's
    PKCS5_PBKDF2_HMAC_SHA1().
    Úpbkdf2_sha1N)rl   rŠ   r5   r‹   r   r¨   Úsha1r�   r†   r   r   r«   r«   o  s   „ ñð €IØ�\‰\�Fr   r«   c                   óN   — e Zd ZdZdZdZdZdZdZd„ Z	d„ Z
d„ Zd	„ Zd
„ Zd„ Zd„ Zy)ÚArgon2PasswordHashera  
    Secure password hashing using the argon2 algorithm.

    This is the winner of the Password Hashing Competition 2013-2015
    (https://password-hashing.net). It requires the argon2-cffi library which
    depends on native C code and might cause portability issues.
    Úargon2é   i � é   c           	      ó^  — | j                  «       }| j                  «       }|j                  j                  |j	                  «       |j	                  «       |j
                  |j                  |j                  |j                  |j                  ¬«      }| j                  |j                  d«      z   S )N)Ú	time_costÚmemory_costÚparallelismÚhash_lenr4   r‘   )rr   ÚparamsÚ	low_levelÚhash_secretr7   r´   rµ   r¶   r·   r4   r   r‚   )rm   r    r6   r°   r¸   Údatas         r   r7   zArgon2PasswordHasher.encode‹  sŒ   € Ø×#Ñ#Ó%ˆØ—‘“ˆØ×Ñ×+Ñ+Ø�O‰OÓØ�K‰K‹MØ×&Ñ&Ø×*Ñ*Ø×*Ñ*Ø—_‘_Ø—‘ð ,ó 
ˆð �~‰~ §¡¨GÓ 4Ñ4Ð4r   c           
      óœ  — | j                  «       }|j                  dd«      \  }}|| j                  k(  sJ ‚|j                  d|z   «      }|j                  d«      �^}}}}	|dt	        |«       dz  z  z  }t        j                  |«      j                  d«      }
||	|j                  |j                  |
|j                  ||j                  |dœ	S )NrN   rS   ú=é   Úlatin1)	r   rW   rµ   r¶   r6   r´   ÚvarietyÚversionr¸   )rr   rU   r   Úextract_parametersrT   r“   Ú	b64decoder‚   rµ   r¶   r´   rÁ   )rm   r   r°   r   Úrestr¸   rÀ   r¢   Úb64saltrW   r6   s              r   r‚   zArgon2PasswordHasher.decode™  sÐ   € Ø×#Ñ#Ó%ˆØ!Ÿ-™-¨¨QÓ/‰ˆ	�4Ø˜DŸN™NÒ*Ð*Ð*Ø×*Ñ*¨3°©:Ó6ˆØ%)§Z¡Z°£_Ñ"ˆ�!�W˜dà�3œ3˜w›<˜-¨!Ñ+Ñ,Ñ,ˆÜ×Ñ Ó(×/Ñ/°Ó9ˆà"ØØ!×-Ñ-Ø!×-Ñ-ØØ×)Ñ)ØØ—~‘~Øñ

ð 
	
r   c                 óô   — | j                  «       }|j                  dd«      \  }}|| j                  k(  sJ ‚	 |j                  «       j	                  d|z   |«      S # |j
                  j                  $ r Y yw xY w)NrN   rS   F)rr   rU   r   ÚPasswordHasherr   Ú
exceptionsÚVerificationError)rm   r    r   r°   r   rÄ   s         r   r   zArgon2PasswordHasher.verify®  sy   € Ø×#Ñ#Ó%ˆØ!Ÿ-™-¨¨QÓ/‰ˆ	�4Ø˜DŸN™NÒ*Ð*Ð*ð	Ø×(Ñ(Ó*×1Ñ1°#¸±*¸hÓGÐGøØ× Ñ ×2Ñ2ò 	Ùð	ús   ¸"A ÁA7Á6A7c                 ó,  — | j                  |«      }t        d«      |d   t        d«      |d   t        d«      |d   t        d«      |d   t        d«      |d   t        d«      |d   t        d	«      t        |d	   «      t        d
«      t        |d
   «      iS )Nr   rÀ   rÁ   zmemory costrµ   z	time costr´   r¶   r6   rW   r¡   r£   s      r   r„   z!Argon2PasswordHasher.safe_summary·  s”   € Ø—+‘+˜gÓ&ˆäˆk‹N˜G KÑ0Üˆi‹L˜' )Ñ,Üˆi‹L˜' )Ñ,ÜˆmÓ˜g mÑ4Üˆk‹N˜G KÑ0ÜˆmÓ˜g mÑ4Üˆf‹I”y ¨¡Ó1Üˆf‹I”y ¨¡Ó1ð	
ð 		
r   c                 ó´   — | j                  |«      }|d   }| j                  «       }|j                  |_        t        |d   | j                  «      }||k7  xs |S )Nr¸   r6   )r‚   r¸   Úsalt_lenr`   rv   )rm   r   rž   Úcurrent_paramsÚ
new_paramsr¥   s         r   r   z Argon2PasswordHasher.must_updateÄ  s[   € Ø—+‘+˜gÓ&ˆØ  Ñ*ˆØ—[‘[“]ˆ
ð -×5Ñ5ˆ
ÔÜ& w¨v¡¸×8IÑ8IÓJˆØ *Ñ,Ò<°Ð<r   c                  ó   — y rA   r†   r{   s      r   r   z#Argon2PasswordHasher.harden_runtimeÎ  ó   € ð 	r   c           	      ó  — | j                  «       }|j                  |j                  j                  j                  |j                  j
                  |j                  |j                  | j                  | j                  | j                  ¬«      S )N)r4   rÁ   rÌ   r·   r´   rµ   r¶   )rr   Ú
Parametersr¹   ÚTypeÚIDÚARGON2_VERSIONÚDEFAULT_RANDOM_SALT_LENGTHÚDEFAULT_HASH_LENGTHr´   rµ   r¶   )rm   r°   s     r   r¸   zArgon2PasswordHasher.paramsÓ  sw   € Ø×#Ñ#Ó%ˆà× Ñ Ø×!Ñ!×&Ñ&×)Ñ)Ø×$Ñ$×3Ñ3Ø×6Ñ6Ø×/Ñ/Ø—n‘nØ×(Ñ(Ø×(Ñ(ð !ó 
ð 	
r   N)rl   rŠ   r5   r‹   r   re   r´   rµ   r¶   r7   r‚   r   r„   r   r   r¸   r†   r   r   r¯   r¯   {  sE   „ ñð €IØ€Gà€IØ€KØ€Kò5ò
ò*ò
ò=òó

r   r¯   c                   ó^   — e Zd ZdZdZej                  ZdZdZ	d„ Z
d„ Zd„ Zd„ Zd	„ Zd
„ Zd„ Zy)ÚBCryptSHA256PasswordHashera&  
    Secure password hashing using the bcrypt algorithm (recommended)

    This is considered by many to be the most secure algorithm but you
    must first install the bcrypt library.  Please be warned that
    this library depends on native C code and might cause portability
    issues.
    Úbcrypt_sha256)ÚbcryptrÛ   é   c                 óX   — | j                  «       }|j                  | j                  «      S rA   )rr   ÚgensaltÚrounds)rm   rÛ   s     r   r6   zBCryptSHA256PasswordHasher.saltð  s#   € Ø×#Ñ#Ó%ˆØ�~‰~˜dŸk™kÓ*Ð*r   c                 ó"  — | j                  «       }|j                  «       }| j                  �2t        j                  | j                  |«      j                  «       «      }|j                  ||«      }| j                  ›d|j                  d«      ›�S )NrN   r‘   )rr   r7   r�   ÚbinasciiÚhexlifyÚhashpwr   r‚   )rm   r    r6   rÛ   r»   s        r   r7   z!BCryptSHA256PasswordHasher.encodeô  sr   € Ø×#Ñ#Ó%ˆØ—?‘?Ó$ˆð �;‰;Ð"ä×'Ñ'¨¯©°HÓ(=×(DÑ(DÓ(FÓGˆHà�}‰}˜X tÓ,ˆØŸ.›.¨$¯+©+°gÔ*>Ð?Ð?r   c                 ó‚   — |j                  dd«      \  }}}}}|| j                  k(  sJ ‚|||dd  |d d t        |«      dœS )NrN   r¾   é   )r   ÚalgostrÚchecksumr6   Úwork_factorr˜   )rm   r   r   Úemptyræ   rè   r»   s          r   r‚   z!BCryptSHA256PasswordHasher.decode   sY   € Ø7>·}±}ÀSÈ!Ó7LÑ4ˆ	�5˜' ;°Ø˜DŸN™NÒ*Ð*Ð*à"ØØ˜R˜S˜	Ø˜˜"�IÜ˜{Ó+ñ
ð 	
r   c                 ó¨   — |j                  dd«      \  }}|| j                  k(  sJ ‚| j                  ||j                  d«      «      }t        ||«      S )NrN   rS   r‘   )rU   r   r7   r   )rm   r    r   r   r»   rŸ   s         r   r   z!BCryptSHA256PasswordHasher.verify  sN   € Ø!Ÿ-™-¨¨QÓ/‰ˆ	�4Ø˜DŸN™NÒ*Ð*Ð*Ø—K‘K ¨$¯+©+°gÓ*>Ó?ˆ	Ü$ W¨iÓ8Ð8r   c                 ó¼   — | j                  |«      }t        d«      |d   t        d«      |d   t        d«      t        |d   «      t        d«      t        |d   «      iS )Nr   úwork factorrè   r6   rç   r¡   r£   s      r   r„   z'BCryptSHA256PasswordHasher.safe_summary  s\   € Ø—+‘+˜gÓ&ˆäˆk‹N˜G KÑ0ÜˆmÓ˜g mÑ4Üˆf‹I”y ¨¡Ó1Üˆj‹Mœ9 W¨ZÑ%8Ó9ð	
ð 	
r   c                 óH   — | j                  |«      }|d   | j                  k7  S )Nrè   )r‚   rß   r£   s      r   r   z&BCryptSHA256PasswordHasher.must_update  s$   € Ø—+‘+˜gÓ&ˆØ�}Ñ%¨¯©Ñ4Ð4r   c                 ó   — |j                  dd«      \  }}|d d }|j                  d«      d   }d| j                  t        |«      z
  z  dz
  }|dkD  r-| j                  ||j                  d«      «       |dz  }|dkD  rŒ,y y )NrN   rS   é   r±   r   r‘   )rU   rß   r™   r7   )rm   r    r   r¢   r»   r6   rß   Údiffs           r   r   z)BCryptSHA256PasswordHasher.harden_runtime  s   € Ø—-‘-  QÓ'‰ˆˆ4Ø�C�RˆyˆØ—‘˜C“ Ñ#ˆà�T—[‘[¤3 v£;Ñ.Ñ/°!Ñ3ˆØ�QŠhØ�K‰K˜ $§+¡+¨gÓ"6Ô7Ø�A‰IˆDð �Q�hr   N)rl   rŠ   r5   r‹   r   r¨   r©   r�   re   rß   r6   r7   r‚   r   r„   r   r   r†   r   r   rÙ   rÙ   á  sE   „ ñð  €IØ�^‰^€FØ"€GØ€Fò+ò
@ò	
ò9ò
ò5ór   rÙ   c                   ó   — e Zd ZdZdZdZy)ÚBCryptPasswordHasheraÓ  
    Secure password hashing using the bcrypt algorithm

    This is considered by many to be the most secure algorithm but you
    must first install the bcrypt library.  Please be warned that
    this library depends on native C code and might cause portability
    issues.

    This hasher does not first hash the password which means it is subject to
    bcrypt's 72 bytes password truncation. Most use cases should prefer the
    BCryptSHA256PasswordHasher.
    rÛ   N)rl   rŠ   r5   r‹   r   r�   r†   r   r   rò   rò   )  s   „ ñð €IØ�Fr   rò   c                   óJ   — e Zd ZdZdZdZdZdZdZdd„Z	d	„ Z
d
„ Zd„ Zd„ Zd„ Zy)ÚScryptPasswordHasherz=
    Secure password hashing using the Scrypt algorithm.
    Úscryptr²   r   é   i @  Nc           	      ó˜  — | j                  ||«       |xs | j                  }|xs | j                  }|xs | j                  }t	        j
                  |j                  «       |j                  «       |||| j                  d¬«      }t        j                  |«      j                  d«      j                  «       }d| j                  |||||fz  S )Né@   )r6   ÚnÚrÚpÚmaxmemÚdklenr‘   z%s$%d$%s$%d$%d$%s)r~   rè   Ú
block_sizer¶   r¨   rõ   r7   rü   r“   r”   r‚   r•   r   )rm   r    r6   rù   rú   rû   Úhash_s          r   r7   zScryptPasswordHasher.encodeF  s¶   € Ø×Ñ ¨$Ô/ØÒ!�×!Ñ!ˆØÒ �—‘ˆØÒ!�×!Ñ!ˆÜ—‘Ø�O‰OÓØ—‘“ØØØØ—;‘;Øô
ˆô × Ñ  Ó'×.Ñ.¨wÓ7×=Ñ=Ó?ˆØ" d§n¡n°a¸¸qÀ!ÀUÐ%KÑKÐKr   c                 óž   — |j                  dd«      \  }}}}}}|| j                  k(  sJ ‚|t        |«      |t        |«      t        |«      |dœS )NrN   é   )r   rè   r6   rþ   r¶   rW   r˜   )rm   r   r   rè   r6   rþ   r¶   rÿ   s           r   r‚   zScryptPasswordHasher.decodeW  sa   € ØGNÇ}Á}Ø�óH
ÑDˆ	�;  j°+¸uð ˜DŸN™NÒ*Ð*Ð*à"Ü˜{Ó+ØÜ˜j›/Ü˜{Ó+Øñ
ð 	
r   c                 ó~   — | j                  |«      }| j                  ||d   |d   |d   |d   «      }t        ||«      S )Nr6   rè   rþ   r¶   rœ   r�   s        r   r   zScryptPasswordHasher.verifye  sO   € Ø—+‘+˜gÓ&ˆØ—K‘KØØ�F‰OØ�MÑ"Ø�LÑ!Ø�MÑ"ó
ˆ	ô % W¨iÓ8Ð8r   c                 óô   — | j                  |«      }t        d«      |d   t        d«      |d   t        d«      |d   t        d«      |d   t        d«      t        |d   «      t        d«      t        |d   «      iS )	Nr   rì   rè   z
block sizerþ   r¶   r6   rW   r¡   r£   s      r   r„   z!ScryptPasswordHasher.safe_summaryp  sx   € Ø—+‘+˜gÓ&ˆäˆk‹N˜G KÑ0ÜˆmÓ˜g mÑ4Üˆl‹O˜W \Ñ2ÜˆmÓ˜g mÑ4Üˆf‹I”y ¨¡Ó1Üˆf‹I”y ¨¡Ó1ð
ð 	
r   c                 ó˜   — | j                  |«      }|d   | j                  k7  xs& |d   | j                  k7  xs |d   | j                  k7  S )Nrè   rþ   r¶   )r‚   rè   rþ   r¶   r£   s      r   r   z ScryptPasswordHasher.must_update{  sV   € Ø—+‘+˜gÓ&ˆà�MÑ" d×&6Ñ&6Ñ6ò :Ø�|Ñ$¨¯©Ñ7ò:à�}Ñ%¨×)9Ñ)9Ñ9ð	
r   c                  ó   — y rA   r†   r{   s      r   r   z#ScryptPasswordHasher.harden_runtimeƒ  rÐ   r   )NNN)rl   rŠ   r5   r‹   r   rþ   rü   r¶   rè   r7   r‚   r   r„   r   r   r†   r   r   rô   rô   ;  sA   „ ñð €IØ€JØ€FØ€KØ€KóLò"
ò	9ò	
ò
ór   rô   c                   ó8   — e Zd ZdZdZd„ Zd„ Zd„ Zd„ Zd„ Z	d„ Z
y	)
ÚMD5PasswordHasherzE
    The Salted MD5 password hashing algorithm (not recommended)
    Úmd5c                 ó¶   — | j                  ||«       t        j                  ||z   j                  «       «      j	                  «       }| j
                  ›d|›d|›�S )NrN   )r~   r¨   r  r7   Ú	hexdigestr   )rm   r    r6   rW   s       r   r7   zMD5PasswordHasher.encode�  sG   € Ø×Ñ ¨$Ô/Ü�{‰{˜D 8™O×3Ñ3Ó5Ó6×@Ñ@ÓBˆØ!Ÿ^›^ªT±4Ð8Ð8r   c                 ó\   — |j                  dd«      \  }}}|| j                  k(  sJ ‚|||dœS )NrN   r±   )r   rW   r6   )rU   r   )rm   r   r   r6   rW   s        r   r‚   zMD5PasswordHasher.decode•  s>   € Ø '§¡¨c°1Ó 5Ñˆ	�4˜Ø˜DŸN™NÒ*Ð*Ð*à"ØØñ
ð 	
r   c                 óf   — | j                  |«      }| j                  ||d   «      }t        ||«      S ©Nr6   rœ   r�   s        r   r   zMD5PasswordHasher.verifyž  s1   € Ø—+‘+˜gÓ&ˆØ—K‘K ¨'°&©/Ó:ˆ	Ü$ W¨iÓ8Ð8r   c           	      ó¤   — | j                  |«      }t        d«      |d   t        d«      t        |d   d¬«      t        d«      t        |d   «      iS )Nr   r6   r±   )rX   rW   r¡   r£   s      r   r„   zMD5PasswordHasher.safe_summary£  sN   € Ø—+‘+˜gÓ&ˆäˆk‹N˜G KÑ0Üˆf‹I”y ¨¡°qÔ9Üˆf‹I”y ¨¡Ó1ð
ð 	
r   c                 óV   — | j                  |«      }t        |d   | j                  «      S r  )r‚   r`   rv   r£   s      r   r   zMD5PasswordHasher.must_update«  s'   € Ø—+‘+˜gÓ&ˆÜ ¨¡°×1BÑ1BÓCÐCr   c                  ó   — y rA   r†   r{   s      r   r   z MD5PasswordHasher.harden_runtime¯  s   € Ør   N)rl   rŠ   r5   r‹   r   r7   r‚   r   r„   r   r   r†   r   r   r  r  ‰  s-   „ ñð €Iò9ò

ò9ò

òDór   r  )rI   )NrI   )r  Ú*)0r“   rá   Ú	functoolsr¨   rh   r]   rˆ   Údjango.confr   Údjango.core.exceptionsr   Údjango.core.signalsr   Údjango.dispatchr   Údjango.utils.cryptor   r   r	   r
   Údjango.utils.module_loadingr   Údjango.utils.translationr   r¢   r   r   r   r&   r,   r.   r   Ú	lru_cacher?   rB   rG   r   r   r[   r`   rb   r�   r«   r¯   rÙ   rò   rô   r  r†   r   r   ú<module>r     s9  ðÛ Û Û Û Û Û Û å  Ý 7Ý /Ý $÷ó õ 6Ý 6àÐ àð  ò
Oó!#óHóó)ð, ×Ññ
ó ð
ð ×ÑñBó ðBñ 
ˆ/Óñ/ó ð/óò2!ó,òN÷
h
ñ h
ôV5EÐ-ô 5Eôp	Ð3ô 	ôc
Ð-ô c
ôLEÐ!3ô EôPÐ5ô ô$KÐ-ô Kô\'Ð*õ 'r   