B CVvg"@sddlZddlZddlZddlmZddlmZddlmZddl m Z m Z m Z ddl mZddlmZmZddlmZdd lmZmZejdd d d Zd dZd!ddZd"ddZd#ddZd$ddZeeeZ GdddZ!ddZ"GdddZ#GdddZ$Gdd d Z%dS)%N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)lazy) format_htmlformat_html_join) import_string)gettextngettext)maxsizecCs ttjS)N)get_password_validatorsrZAUTH_PASSWORD_VALIDATORSrrK/tmp/pip-install-o3oxmrkh/Django/django/contrib/auth/password_validation.pyget_default_password_validatorssrc Cshg}x^|D]V}yt|d}Wn(tk rFd}t||dYnX||f|diq W|S)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONS)r ImportErrorrappendget)Zvalidator_configZ validators validatorklassmsgrrrrs rc Csng}|dkrt}xJ|D]B}y|||Wqtk rX}z||Wdd}~XYqXqW|rjt|dS)z Validate whether the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsrerrorrrrvalidate_password#s  r!cCs:|dkrt}x&|D]}t|ddd}|||qWdS)zy Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcWsdS)Nr)arrr>z"password_changed..)rgetattr)rrrrr"rrrr"6s  r"cCs2g}|dkrt}x|D]}||qW|S)zG Return a list of all help texts of all configured validators. N)rr get_help_text)r help_textsrrrrpassword_validators_help_textsBs  r)cCs0t|}tdddd|D}|r,td|SdS)z` Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • css|] }|fVqdS)Nr).0 help_textrrr Tsz6_password_validators_help_text_html..z
      {}
    )r)r r )rr(Z help_itemsrrr#_password_validators_help_text_htmlNsr.c@s,eZdZdZd ddZd ddZdd ZdS) MinimumLengthValidatorz? Validate whether the password is of a minimum length. cCs ||_dS)N) min_length)selfr1rrr__init___szMinimumLengthValidator.__init__NcCs0t||jkr,ttdd|jdd|jiddS)NzNThis password is too short. It must contain at least %(min_length)d character.zOThis password is too short. It must contain at least %(min_length)d characters.Zpassword_too_shortr1)codeparams)lenr1rr )r2rrrrrrbszMinimumLengthValidator.validatecCstdd|jd|jiS)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.r1)r r1)r2rrrr'ns z$MinimumLengthValidator.get_help_text)r0)N)__name__ __module__ __qualname____doc__r3rr'rrrrr/[s  r/cCs0t|}|d|}t|}|d|ko.||kS)a Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )r6)rmax_similarityvalueZpwd_lenZlength_bound_similarityZ value_lenrrrexceeds_maximum_length_ratiovs r?c@s4eZdZdZdZedfddZd ddZd d ZdS) UserAttributeSimilarityValidatora Validate whether the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )usernameZ first_name last_nameemailgffffff?cCs ||_|dkrtd||_dS)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorr=)r2rDr=rrrr3sz)UserAttributeSimilarityValidator.__init__Nc Cs|sdS|}x|jD]}t||d}|rt|ts8q|}td||g}xx|D]p}t||j|rlqXt ||d |jkrXyt|j |j }Wntk r|}YnXttddd|idqXWqWdS)Nz\W+)r#bz4The password is too similar to the %(verbose_name)s.Zpassword_too_similar verbose_name)r4r5)lowerrDr& isinstancestrresplitr?r=rZ quick_ratioZ_meta get_fieldrGrr_) r2rrZattribute_namer>Z value_lowerZ value_partsZ value_partrGrrrrs*    z)UserAttributeSimilarityValidator.validatecCstdS)NuHYour password can’t be too similar to your other personal information.)rN)r2rrrr'sz.UserAttributeSimilarityValidator.get_help_text)N)r7r8r9r:ZDEFAULT_USER_ATTRIBUTESr3rr'rrrrr@s   r@c@s@eZdZdZeejdZefddZ d ddZ dd Z dS) CommonPasswordValidatora Validate whether the password is a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/281ce539915a947a23db17137d91aeb7 The password list must be lowercased to match the comparison in validate(). zcommon-passwords.txt.gzc Csny0tj|ddd}dd|D|_WdQRXWn8tk rht|}dd|D|_WdQRXYnXdS)Nrtzutf-8)encodingcSsh|] }|qSr)strip)r+xrrr sz3CommonPasswordValidator.__init__..cSsh|] }|qSr)rR)r+rSrrrrTs)gzipopen passwordsOSError)r2Zpassword_list_pathfrrrr3s  z CommonPasswordValidator.__init__NcCs&||jkr"ttddddS)NzThis password is too common.Zpassword_too_common)r4)rHrRrWrrN)r2rrrrrrsz CommonPasswordValidator.validatecCstdS)Nu2Your password can’t be a commonly used password.)rN)r2rrrr'sz%CommonPasswordValidator.get_help_text)N) r7r8r9r:r__file__resolveparentZDEFAULT_PASSWORD_LIST_PATHr3rr'rrrrrOs    rOc@s"eZdZdZdddZddZdS)NumericPasswordValidatorz8 Validate whether the password is alphanumeric. NcCs|rttddddS)Nz"This password is entirely numeric.Zpassword_entirely_numeric)r4)isdigitrrN)r2rrrrrrsz!NumericPasswordValidator.validatecCstdS)Nu*Your password can’t be entirely numeric.)rN)r2rrrr'sz&NumericPasswordValidator.get_help_text)N)r7r8r9r:rr'rrrrr]s r])NN)NN)N)N)& functoolsrUrKdifflibrZpathlibrZ django.confrZdjango.core.exceptionsrrrZdjango.utils.functionalrZdjango.utils.htmlr r Zdjango.utils.module_loadingr Zdjango.utils.translationr rNr lru_cacherrr!r"r)r.rJZ"password_validators_help_text_htmlr/r?r@rOr]rrrrs,       0