Γh$zddlZddlZddlZddlmZddlmZddlmZddl m Z m Z m Z ddl mZmZddlmZmZddlmZdd lmZdd lmZejd d Zd ZddZddZddZddZeee Z!GddZ"dZ#GddZ$GddZ%GddZ&dS)N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)cached_propertylazy) format_htmlformat_html_join) import_string)gettext)ngettext)maxsizec4ttjSN)get_password_validatorsrAUTH_PASSWORD_VALIDATORSf/var/www/surfInsights/venv3-11/lib/python3.11/site-packages/django/contrib/auth/password_validation.pyget_default_password_validatorsrs "8#D E EErc g}|D]p} t|d}n(#t$rd}t||dzwxYw||di|diq|S)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONSr)r ImportErrorrappendget)validator_config validators validatorklassmsgs rrrsJ% A A  @!)F"344EE @ @ @4 'sYv->'>?? ?  @ %%??)-- 2">">??@@@@ s %Acg}|t}|D]E} |||#t$r}||Yd}~>d}~wwxYw|rt|dS)z Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsr!errors rvalidate_passwordr+)sF"=??(!!  !   x . . . . ! ! ! MM%  ! &f%%%&&s/ AAAcl|t}|D] }t|dd}|||!dS)zy Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcdSrr)as rz"password_changed..DsTr)rgetattr)r&r'r(r!r-s rr-r-<sZ "=??()) "9.@//RR4(((())rcg}|t}|D])}||*|S)zG Return a list of all help texts of all configured validators. )rr get_help_text)r( help_textsr!s rpassword_validators_help_textsr5HsSJ"=??(55 )11334444 rc~t|}tddd|D}|rtd|ndS)z` Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • c3K|]}|fVdSrr).0 help_texts r z6_password_validators_help_text_html..[s$EEYYLEEEEEErz
      {}
    )r5r r )r(r4 help_itemss r#_password_validators_help_text_htmlr=TsT 00CDDJ! MEE*EEEJ6@ G;}j 1 1 1RGrc(eZdZdZddZddZdZdS) MinimumLengthValidatorz< Validate that the password is of a minimum length. c||_dSr) min_length)selfrBs r__init__zMinimumLengthValidator.__init__hs $rNct||jkr-ttdd|jdd|jidS)NzNThis password is too short. It must contain at least %(min_length)d character.zOThis password is too short. It must contain at least %(min_length)d characters.password_too_shortrBcodeparams)lenrBrrrCr&r's rr%zMinimumLengthValidator.validateks_ x==4? * *!01O *$do6     + *rcBtdd|jd|jizS)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.rB)rrBrCs rr3z$MinimumLengthValidator.get_help_textys0 K L O  4? + , ,r)r@r)__name__ __module__ __qualname____doc__rDr%r3rrrr?r?csU%%%%    ,,,,,rr?clt|}|dz |z}t|}|d|zko||kS)a Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )rJ)r&max_similarityvaluepwd_lenlength_bound_similarity value_lens rexceeds_maximum_length_ratiorZsD0(mmG,q07:E I b9n $ L5L)LLrc0eZdZdZdZedfdZddZdZdS) UserAttributeSimilarityValidatora Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )username first_name last_nameemailgffffff?cL||_|dkrtd||_dS)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorrU)rCrbrUs rrDz)UserAttributeSimilarityValidator.__init__s2. C  BCC C,rNcL|sdS|}|jD]}t||d}|rt|ts,|}t jd||gz}|D]}t||j|rt|| |jkra t |j |j }n#t$r|}YnwxYwtt!ddd|idS)Nz\W+)r/bz4The password is too similar to the %(verbose_name)s.password_too_similar verbose_namerG)lowerrbr1 isinstancestrresplitrZrUr quick_ratio_meta get_fieldrgrr_) rCr&r'attribute_namerV value_lower value_parts value_partrgs rr%z)UserAttributeSimilarityValidator.validatesr  F>>##"2  ND.$77E  5# 6 6 ++--K(6;77;-GK)   /d1:#h*===IIKK*++6'* J00@@M(( -666'5 6)PQQ3 . =+     s,C.. C=<C=c tdS)NuHYour password can’t be too similar to your other personal information.rprMs rr3z.UserAttributeSimilarityValidator.get_help_texts V   rr)rNrOrPrQDEFAULT_USER_ATTRIBUTESrDr%r3rrrr\r\sd  O'>s---- @     rr\c@eZdZdZedZefdZddZdZdS)CommonPasswordValidatora Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). c^ttjdz S)Nzcommon-passwords.txt.gz)r__file__resolveparentrMs rDEFAULT_PASSWORD_LIST_PATHz2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHs#H~~%%''.1JJJrcJ|tjur|j} tj|dd5}d|D|_ddddS#1swxYwYdS#t $r>t|5}d|D|_dddYdS#1swxYwYYdSwxYw)Nrtzutf-8)encodingc6h|]}|Srstripr9xs r z3CommonPasswordValidator.__init__.. !7!7!7!''))!7!7!7rc6h|]}|Srrrs rrz3CommonPasswordValidator.__init__..rr)ryr~gzipopen passwordsOSError)rCpassword_list_pathfs rrDz CommonPasswordValidator.__init__sW !8!S S S!%!@  8-tgFFF 8!!7!7Q!7!7!7 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8()) 8Q!7!7Q!7!7!7 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8sXAA  A AAAAB"3B B"B B"B B"!B"Nc||jvrtt dddS)NzThis password is too common.password_too_commonrH)rhrrrrprKs rr%z CommonPasswordValidator.validatesS >>   ! ! # #t~ 5 5!011*  6 5rc tdS)Nu2Your password can’t be a commonly used password.rvrMs rr3z%CommonPasswordValidator.get_help_textsEFFFrr) rNrOrPrQr r~rDr%r3rrrryrys~KK_K+E8888GGGGGrryc eZdZdZddZdZdS)NumericPasswordValidatorz= Validate that the password is not entirely numeric. Ncj|rttdddS)Nz"This password is entirely numeric.password_entirely_numericr)isdigitrrprKs rr%z!NumericPasswordValidator.validatesF      !6770   rc tdS)Nu*Your password can’t be entirely numeric.rvrMs rr3z&NumericPasswordValidator.get_help_text s=>>>rr)rNrOrPrQr%r3rrrrrsA?????rr)NNr)' functoolsrrkdifflibrpathlibr django.confrdjango.core.exceptionsrrrdjango.utils.functionalr r django.utils.htmlr r django.utils.module_loadingr django.utils.translationrrpr lru_cacherrr+r-r5r=rj"password_validators_help_text_htmlr?rZr\ryrrrrrs` ######  :9999999;;;;;;;;555555111111------T"""FF#"F    &&&&& ) ) ) )     H H H H&*T*Ms%S%S",,,,,,,,<MMM<7 7 7 7 7 7 7 7 t!G!G!G!G!G!G!G!GH ? ? ? ? ? ? ? ? ? ?r