OwlCyberSecurity - MANAGER
Edit File: password_validation.cpython-39.pyc
a iH�f�$ � @ s& d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dl m Z m Z m Z d dl mZmZ d dlmZmZ d dlmZ d d lmZ d d lmZ e jdd �d d � �Zdd� Zd"dd�Z d#dd�Z d$dd�Z d%dd�Z ee e �Z!G dd� d�Z"dd� Z#G d d � d �Z$G d d � d �Z%G d d!� d!�Z&dS )&� N)�SequenceMatcher)�Path)�settings)�FieldDoesNotExist�ImproperlyConfigured�ValidationError)�cached_property�lazy)� format_html�format_html_join)� import_string)�gettext)�ngettext)�maxsizec C s t tj�S �N)�get_password_validatorsr ZAUTH_PASSWORD_VALIDATORS� r r �i/home/gouroczh/virtualenv/test/3.9/lib/python3.9/site-packages/django/contrib/auth/password_validation.py� get_default_password_validators s r c C sf g }| D ]X}zt |d �}W n& tyB d}t||d ��Y n0 |�|f i |�di ���� q|S )N�NAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.�OPTIONS)r � ImportErrorr �append�get)Zvalidator_configZ validators� validator�klass�msgr r r r s � r c C sl g }|du rt � }|D ]D}z|�| |� W q tyX } z|�|� W Y d}~qd}~0 0 q|rht|��dS )z� Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)r �validater r )�password�user�password_validators�errorsr �errorr r r �validate_password) s "r# c C s6 |du rt � }|D ] }t|ddd� �}|| |� qdS )zy Inform all validators that have implemented a password_changed() method that the password has been changed. N�password_changedc W s d S r r )�ar r r �<lambda>D � z"password_changed.<locals>.<lambda>)r �getattr)r r r r r$ r r r r$ < s r$ c C s. g }| du rt � } | D ]}|�|�� � q|S )zG Return a list of all help texts of all configured validators. N)r r � get_help_text)r � help_textsr r r r � password_validators_help_textsH s r+ c C s0 t | �}tdddd� |D ��}|r,td|�S dS )z` Return an HTML string with all help texts of all configured validators in an <ul>. � z <li>{}</li>c s s | ] }|fV qd S r r )�.0� help_textr r r � <genexpr>[ r' z6_password_validators_help_text_html.<locals>.<genexpr>z <ul>{}</ul>)r+ r r )r r* Z help_itemsr r r �#_password_validators_help_text_htmlT s �r0 c @ s, e Zd ZdZd dd�Zd dd�Zdd � ZdS ) �MinimumLengthValidatorz< Validate that the password is of a minimum length. � c C s || _ d S r )� min_length)�selfr3 r r r �__init__h s z MinimumLengthValidator.__init__Nc C s0 t |�| jk r,ttdd| j�dd| jid��d S )NzNThis password is too short. It must contain at least %(min_length)d character.zOThis password is too short. It must contain at least %(min_length)d characters.Zpassword_too_shortr3 ��code�params)�lenr3 r r �r4 r r r r r r k s ��z MinimumLengthValidator.validatec C s t dd| j�d| ji S )Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.r3 )r r3 �r4 r r r r) y s ��z$MinimumLengthValidator.get_help_text)r2 )N)�__name__� __module__� __qualname__�__doc__r5 r r) r r r r r1 c s r1 c C s0 t | �}|d | }t |�}|d| ko.||k S )a� Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching. � � )r9 )r �max_similarity�valueZpwd_lenZlength_bound_similarityZ value_lenr r r � exceeds_maximum_length_ratio� s rD c @ s4 e Zd ZdZdZedfdd�Zd dd�Zd d � ZdS ) � UserAttributeSimilarityValidatora� Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )�usernameZ first_name� last_name�emailgffffff�?c C s || _ |dk rtd��|| _d S )Ng�������?z#max_similarity must be at least 0.1)�user_attributes� ValueErrorrB )r4 rI rB r r r r5 � s z)UserAttributeSimilarityValidator.__init__Nc C s� |sd S |� � }| jD ]�}t||d �}|rt|t�s6q|� � }t�d|�|g }|D ]n}t|| j|�rhqTt ||d�� � | jkrTzt|j � |�j �}W n ty� |}Y n0 ttd�dd|id��qTqd S )Nz\W+)r% �bz4The password is too similar to the %(verbose_name)s.Zpassword_too_similar� verbose_namer6 )�lowerrI r( � isinstance�str�re�splitrD rB r Z quick_ratio�_meta� get_fieldrL r r �_) r4 r r Zattribute_namerC Z value_lowerZ value_partsZ value_partrL r r r r � s: ��� � �z)UserAttributeSimilarityValidator.validatec C s t d�S )NuH Your password can’t be too similar to your other personal information.�rT r; r r r r) � s �z.UserAttributeSimilarityValidator.get_help_text)N)r< r= r> r? ZDEFAULT_USER_ATTRIBUTESr5 r r) r r r r rE � s rE c @ s: e Zd ZdZedd� �Zefdd�Zd dd�Zd d � ZdS ) �CommonPasswordValidatora� Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). c C s t t��� jd S )Nzcommon-passwords.txt.gz)r �__file__�resolve�parentr; r r r �DEFAULT_PASSWORD_LIST_PATH� s z2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHc C s� |t ju r| j}zDtj|ddd�� }dd� |D �| _W d � n1 sH0 Y W nJ ty� t|�� }dd� |D �| _W d � n1 s�0 Y Y n0 d S )N�rtzutf-8)�encodingc S s h | ] }|� � �qS r ��strip�r- �xr r r � <setcomp>� r' z3CommonPasswordValidator.__init__.<locals>.<setcomp>c S s h | ] }|� � �qS r r] r_ r r r ra � r' )rV rZ �gzip�open� passwords�OSError)r4 Zpassword_list_path�fr r r r5 � s 2 z CommonPasswordValidator.__init__Nc C s& |� � �� | jv r"ttd�dd��d S )Nz This password is too common.Zpassword_too_common�r7 )rM r^ rd r rT r: r r r r � s �z CommonPasswordValidator.validatec C s t d�S )Nu2 Your password can’t be a commonly used password.rU r; r r r r) � s z%CommonPasswordValidator.get_help_text)N) r< r= r> r? r rZ r5 r r) r r r r rV � s rV c @ s" e Zd ZdZddd�Zdd� ZdS )�NumericPasswordValidatorz= Validate that the password is not entirely numeric. Nc C s |� � rttd�dd��d S )Nz"This password is entirely numeric.Zpassword_entirely_numericrg )�isdigitr rT r: r r r r s �z!NumericPasswordValidator.validatec C s t d�S )Nu* Your password can’t be entirely numeric.rU r; r r r r) s z&NumericPasswordValidator.get_help_text)N)r< r= r> r? r r) r r r r rh � s rh )NN)NN)N)N)'� functoolsrb rP �difflibr �pathlibr Z django.confr Zdjango.core.exceptionsr r r Zdjango.utils.functionalr r Zdjango.utils.htmlr r Zdjango.utils.module_loadingr Zdjango.utils.translationr rT r � lru_cacher r r# r$ r+ r0 rO Z"password_validators_help_text_htmlr1 rD rE rV rh r r r r �<module> s0 :$