Dvg$fddlZddlZddlZddlmZddlmZddlmZddl m Z m Z m Z ddl mZmZddlmZmZddlmZdd lmZdd lmZejd Zd Zdd ZddZddZddZeee Z!GddZ"dZ#GddZ$GddZ%GddZ&dS)N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)cached_propertylazy) format_htmlformat_html_join) import_string)gettext)ngettextc4ttjSN)get_password_validatorsrAUTH_PASSWORD_VALIDATORSd/var/www/pixelcanvas.ch/venv/lib/python3.11/site-packages/django/contrib/auth/password_validation.pyget_default_password_validatorsrs "8#D E EErc g}|D]p} t|d}n(#t$rd}t||dzwxYw||di|diq|S)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONSr)r ImportErrorrappendget)validator_config validators validatorklassmsgs rrrsJ% A A  @!)F"344EE @ @ @4 'sYv->'>?? ?  @ %%??)-- 2">">??@@@@ s %Acg}|t}|D]E} |||#t$r}||Yd}~>d}~wwxYw|rt|dS)z Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsr errors rvalidate_passwordr*)sF"=??(!!  !   x . . . . ! ! ! MM%  ! &f%%%&&s/ AAAcl|t}|D] }t|dd}|||!dS)zy Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcdSrr)as rz"password_changed..DsTr)rgetattr)r%r&r'r r,s rr,r,<sZ "=??()) "9.@//RR4(((())rcg}|t}|D])}||*|S)zG Return a list of all help texts of all configured validators. )rr get_help_text)r' help_textsr s rpassword_validators_help_textsr4HsSJ"=??(55 )11334444 rc~t|}tddd|D}|rtd|ndS)z` Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • c3K|]}|fVdSrr).0 help_texts r z6_password_validators_help_text_html..[s$EEYYLEEEEEErz
      {}
    )r4r r )r'r3 help_itemss r#_password_validators_help_text_htmlr<TsT 00CDDJ! MEE*EEEJ6@ G;}j 1 1 1RGrc(eZdZdZddZddZdZdS) MinimumLengthValidatorz< Validate that the password is of a minimum length. c||_dSr) min_length)selfrAs r__init__zMinimumLengthValidator.__init__hs $rNct||jkr-ttdd|jdd|jidS)NzNThis password is too short. It must contain at least %(min_length)d character.zOThis password is too short. It must contain at least %(min_length)d characters.password_too_shortrAcodeparams)lenrArrrBr%r&s rr$zMinimumLengthValidator.validateks_ x==4? * *!01O *$do6     + *rcBtdd|jd|jizS)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.rA)rrArBs rr2z$MinimumLengthValidator.get_help_textys0 K L O  4? + , ,r)r?r)__name__ __module__ __qualname____doc__rCr$r2rrrr>r>csU%%%%    ,,,,,rr>clt|}|dz |z}t|}|d|zko||kS)a Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )rI)r%max_similarityvaluepwd_lenlength_bound_similarity value_lens rexceeds_maximum_length_ratiorYsD0(mmG,q07:E I b9n $ L5L)LLrc0eZdZdZdZedfdZddZdZdS) UserAttributeSimilarityValidatora Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )username first_name last_nameemailgffffff?cL||_|dkrtd||_dS)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorrT)rBrarTs rrCz)UserAttributeSimilarityValidator.__init__s2. C  BCC C,rNcL|sdS|}|jD]}t||d}|rt|ts,|}t jd||gz}|D]}t||j|rt|| |jkra t |j |j }n#t$r|}YnwxYwtt!ddd|idS)Nz\W+)r.bz4The password is too similar to the %(verbose_name)s.password_too_similar verbose_namerF)lowerrar0 isinstancestrresplitrYrTr quick_ratio_meta get_fieldrfrr_) rBr%r&attribute_namerU value_lower value_parts value_partrfs rr$z)UserAttributeSimilarityValidator.validatesr  F>>##"2  ND.$77E  5# 6 6 ++--K(6;77;-GK)   /d1:#h*===IIKK*++6'* J00@@M(( -666'5 6)PQQ3 . =+     s,C.. C=<C=c tdS)NuHYour password can’t be too similar to your other personal information.rorLs rr2z.UserAttributeSimilarityValidator.get_help_texts V   rr)rMrNrOrPDEFAULT_USER_ATTRIBUTESrCr$r2rrrr[r[sd  O'>s---- @     rr[c@eZdZdZedZefdZddZdZdS)CommonPasswordValidatora Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). c^ttjdz S)Nzcommon-passwords.txt.gz)r__file__resolveparentrLs rDEFAULT_PASSWORD_LIST_PATHz2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHs#H~~%%''.1JJJrcJ|tjur|j} tj|dd5}d|D|_ddddS#1swxYwYdS#t $r>t|5}d|D|_dddYdS#1swxYwYYdSwxYw)Nrtzutf-8)encodingc6h|]}|Srstripr8xs r z3CommonPasswordValidator.__init__.. !7!7!7!''))!7!7!7rc6h|]}|Srrrs rrz3CommonPasswordValidator.__init__..rr)rxr}gzipopen passwordsOSError)rBpassword_list_pathfs rrCz CommonPasswordValidator.__init__sW !8!S S S!%!@  8-tgFFF 8!!7!7Q!7!7!7 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8()) 8Q!7!7Q!7!7!7 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8sXAA  A AAAAB"3B B"B B"B B"!B"Nc||jvrtt dddS)NzThis password is too common.password_too_commonrG)rgrrrrorJs rr$z CommonPasswordValidator.validatesS >>   ! ! # #t~ 5 5!011*  6 5rc tdS)Nu2Your password can’t be a commonly used password.rurLs rr2z%CommonPasswordValidator.get_help_textsEFFFrr) rMrNrOrPr r}rCr$r2rrrrxrxs~KK_K+E8888GGGGGrrxc eZdZdZddZdZdS)NumericPasswordValidatorz= Validate that the password is not entirely numeric. Ncj|rttdddS)Nz"This password is entirely numeric.password_entirely_numericr)isdigitrrorJs rr$z!NumericPasswordValidator.validatesF      !6770   rc tdS)Nu*Your password can’t be entirely numeric.rurLs rr2z&NumericPasswordValidator.get_help_text s=>>>rr)rMrNrOrPr$r2rrrrrsA?????rr)NNr)' functoolsrrjdifflibrpathlibr django.confrdjango.core.exceptionsrrrdjango.utils.functionalr r django.utils.htmlr r django.utils.module_loadingr django.utils.translationrrorcacherrr*r,r4r<ri"password_validators_help_text_htmlr>rYr[rxrrrrrsQ ######  :9999999;;;;;;;;555555111111------ FFF    &&&&& ) ) ) )     H H H H&*T*Ms%S%S",,,,,,,,<MMM<7 7 7 7 7 7 7 7 t!G!G!G!G!G!G!G!GH ? ? ? ? ? ? ? ? ? ?r