_vgnnddlmZddlmZddlmZddlmZddlm Z ddl m Z dgZ Gd dZ d S) ) urlencode)login) AnonymousUser)redirect)settings)get_userAuthenticationMiddlewarecPeZdZdZdZdZdZedZedZ dS)r ax Look for a signed token in the URL of any request and log a user in. After login, remove the token from the URL with an HTTP redirect. .. admonition:: This functionality requires additional setup for Safari. :class: warning :class:`AuthenticationMiddleware` requires the optional ``ua`` extra to prevent :ref:`issues with Safari `: .. code-block:: console $ pip install 'django-sesame[ua]' In the :setting:`MIDDLEWARE` setting, ``"sesame.middleware.AuthenticationMiddleware"`` should be placed just after ``"django.contrib.auth.middleware.AuthenticationMiddleware"``: .. code-block:: python MIDDLEWARE = [ ..., "django.contrib.auth.middleware.AuthenticationMiddleware", "sesame.middleware.AuthenticationMiddleware", ..., ] c||_dSN) get_response)selfrs N/var/www/pixelcanvas.ch/venv/lib/python3.11/site-packages/sesame/middleware.py__init__z!AuthenticationMiddleware.__init__,s(cV||p||Sr )process_requestr)rrequests r__call__z!AuthenticationMiddleware.__call__/s+##G,,J0A0A'0J0JJrclt|t|drdnd}t|drW|Ut||t|dr5|jdkr*||s||St|ds||n t |_dSdS)a Log user the in if ``request`` contains a valid token. Return an HTTP redirect response that removes the token from the URL after a successful login (except on Safari to avoid triggering ITP, and only when sessions are enabled). sessionFN)update_last_loginuserGET)r hasattrrmethod is_safari get_redirectrr)rrrs rrz(AuthenticationMiddleware.process_request4s '.w 'B'BLee    7I & & 24+; '4 (( 2Ne++w//,((111w'' I#'#344GLLL I Irc ddlm}|jdd}||}|dddkp|ddd kS#t $rYdSwxYw) Nr)user_agent_parserHTTP_USER_AGENT user_agentfamilySafariosiOS) ua_parserr!METAgetParse ImportError)rr!r$ parsed_uas rrz"AuthenticationMiddleware.is_safari\s  3 3 3 3 3 3!))*;R@@J)// ;;I,'1X=6T?8,5     44 sA A*)A*c|j}|tj|j}|r|dt |zz }t|S)zX Create an HTTP redirect response that removes the token from the URL. ?)rcopypopr TOKEN_NAMEpathrr)rparamsurls rrz%AuthenticationMiddleware.get_redirectjs^ !!## 8&'''l  + 36*** *C}}rN) __name__ __module__ __qualname____doc__rrr staticmethodrrrrr r s<)))KKK &I&I&IP  \   \   rN) urllib.parserdjango.contrib.authrdjango.contrib.auth.modelsrdjango.shortcutsrr#rutilsr __all__r r<rrrCs""""""%%%%%%444444%%%%%% % &hhhhhhhhhhr