B CVvg@sddlZddlZddlmZddlmZmZddlmZddl m Z ddl m Z m Z ddlmZmZGdd d ejZGd d d ejZGd d d ZGdddeZdS)N)settings) BaseStorageMessage)signing) SimpleCookie)constant_time_compare salted_hmac)SafeData mark_safecs$eZdZdZdZfddZZS)MessageEncoderzI Compactly serialize instances of the ``Message`` class as JSON. Z__json_messagecsRt|trFt|jtrdnd}|j||j|jg}|jrB||j|St |S)Nr) isinstancermessager message_keylevelZ extra_tagsappendsuperdefault)selfobjZ is_safedatar) __class__J/tmp/pip-install-o3oxmrkh/Django/django/contrib/messages/storage/cookie.pyrs  zMessageEncoder.default)__name__ __module__ __qualname____doc__rr __classcell__rr)rrr sr cs(eZdZdZddZfddZZS)MessageDecoderzE Decode JSON that includes serialized ``Message`` instances. cszt|trV|rV|dtjkrD|dr4t|d|d<t|ddSfdd|DSt|trvfdd|DS|S) Nrr csg|]}|qSr)process_messages).0item)rrr (sz3MessageDecoder.process_messages..csi|]\}}||qSr)r!)r"keyvalue)rrr *sz3MessageDecoder.process_messages..)r listr rr rdictitems)rrr)rrr!"s   zMessageDecoder.process_messagesc stj|f|}||S)N)rdecoder!)rskwargsdecoded)rrrr+.szMessageDecoder.decode)rrrrr!r+rrr)rrrs rc@seZdZddZddZdS)MessageSerializercCstj|dtddS)N),:) separatorsclszlatin-1)jsondumpsr encode)rrrrrr54s zMessageSerializer.dumpscCstj|dtdS)Nzlatin-1)r3)r4loadsr+r)rdatarrrr7;szMessageSerializer.loadsN)rrrr5r7rrrrr/3sr/csleZdZdZdZdZdZdZfddZdd Z d d Z dd dZ ddZ dddZ ddZddZZS) CookieStoragez% Store messages in a cookie. messagesiZ__messagesnotfinished__zdjango.contrib.messagescs"tj||tj|jd|_dS)N)Zsalt)r__init__rZget_cookie_signerkey_saltsigner)rargsr-)rrrr;KszCookieStorage.__init__cOsF|jj|j}||}|o*|d|jk }|r>|s>|||fS)a  Retrieve a list of messages from the messages cookie. If the not_finished sentinel value is found at the end of the message list, remove it and return a result indicating that not all messages were retrieved by this storage. )requestZCOOKIESget cookie_name_decode not_finishedpop)rr>r-r8r:Z all_retrievedrrr_getOs  zCookieStorage._getcCsH|r.|j|j|tjtjpdtjp"dtjdn|j|jtjtjddS)zz Either set the cookie with the encoded data if there is any data to store, or delete the cookie. N)domainsecurehttponlysamesite)rGrJ) set_cookierBrZSESSION_COOKIE_DOMAINZSESSION_COOKIE_SECUREZSESSION_COOKIE_HTTPONLYZSESSION_COOKIE_SAMESITEZ delete_cookie)r encoded_dataresponserrr_update_cookie^s zCookieStorage._update_cookieTc sg}||}|jrztfdd}xR|rx|||jkrx|rP||dn|d||j||jg|d}q(W||||S)aT Store the messages to a cookie and return a list of any messages which could not be stored. If the encoded data is larger than ``max_cookie_size``, remove messages until the data fits (these are the messages which are returned), and add the not_finished sentinel value to indicate as much. cst|dS)Nr )len value_encode)val)cookierr stored_lengthsz+CookieStorage._store..stored_lengthr) encode_empty)_encodemax_cookie_sizerrrEinsertrDrN) rr:rMZ remove_oldestr>r-Zunstored_messagesrLrSr)rRr_storers     zCookieStorage._storecCsd}t||S)z # RemovedInDjango40Warning: pre-Django 3.1 hashes will be invalid. Create an HMAC/SHA1 hash based on the value and the project setting's SECRET_KEY, modified to make it unique for the present purpose. zdjango.contrib.messages)r hexdigest)rr&r<rrr _legacy_hashs zCookieStorage._legacy_hashFcCs|s|r|jj|tddSdS)a Return an encoded version of the messages list which can be stored as plain text. Since the data will be retrieved from the client-side, the encoded data also contains a hash to ensure that the data was not tampered with. T) serializercompressN)r=Z sign_objectr/)rr:rTrrrrUszCookieStorage._encodec Cs|sdSy|jj|tdStjk r8||}Yn(tjtj fk r^|j |}YnX|rytj |t dStj k rYnXd|_ dS)z Safely decode an encoded text stream back into a list of messages. If the encoded text stream contained an invalid hash or was in an invalid format, return None. N)r[)r3T)r=Z unsign_objectr/rZ BadSignature_legacy_decodebinasciiErrorr4JSONDecodeErrorZunsignr7rused)rr8r.rrrrCszCookieStorage._decodecCs8|dd}t|dkr4|\}}t|||r4|SdS)N$r r )splitrOrrZ)rr8bitsZhash_r&rrrr]s   zCookieStorage._legacy_decode)T)F)rrrrrBrVrDr<r;rFrNrXrZrUrCr]rrr)rrr9?s   "r9)r^r4Z django.confrZ$django.contrib.messages.storage.baserrZ django.corerZ django.httprZdjango.utils.cryptorrZdjango.utils.safestringr r JSONEncoderr JSONDecoderrr/r9rrrrs