U
|
Þ=®d¶ ã @ sÌ U d dl mZ d dlZd dlZd dlZd dlZd dlZd dlZdZdZ e
|
dd ej ej j fD Zded< d d
|
d d d Zd
|
d
|
d
|
ddddZd d
|
d
|
d d
|
dddZd
|
d
|
ddddZd
|
d
|
dd d d ZdS ) é )Ú annotationsNZ>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789iÀ' c c s" | ]}|d k r|dkr|V qd S )Nú/© ©Ú.0Úsepr r úHd:\z\workplace\vscode\pyvenv\venv\Lib\site-packages\werkzeug/security.pyÚ <genexpr> s r z list[str]Ú _os_alt_sepsÚintÚstr)ÚlengthÚreturnc C s( | dkrt dd dd t| D ¡S )zAGenerate a random string of SALT_CHARS with specified ``length``.r z Salt length must be at least 1.Ú c s s | ]}t t¡V qd S ©N)ÚsecretsÚchoiceÚ
|
SALT_CHARS)r Ú_r r r r s zgen_salt.<locals>.<genexpr>)Ú
|
ValueErrorÚjoinÚrange)r r r r Úgen_salt s r ztuple[str, str])ÚmethodÚsaltÚpasswordr c C s | dkr t jddd || fS | d¡^} }| d¡}| d¡}| dkrÎ|sZd}d }d
|
}n4ztt|\}}}W n tk
|
r td d Y nX d | | | }tj||||||d ¡ d| d| d| fS | dkrVt
|
|}|dkròd} t }
|
n@|d
|
kr
|
|d } t }
|
n(|dkr*|d } t|d
|
}
|
ntdt | |||
|
¡ ¡ d| d|
|
fS t jd| ddd t ||| ¡ ¡ | fS d S )NÚplainznThe 'plain' password method is deprecated and will be removed in Werkzeug 3.0. Migrate to the 'scrypt' method.é )Ú
|
stacklevelú:zutf-8Úscrypti é é z'scrypt' takes 3 arguments.é )r ÚnÚrÚpÚmaxmemzscrypt:Úpbkdf2r Úsha256é z'pbkdf2' takes 2 arguments.zpbkdf2:zThe 'zd' password method is deprecated and will be removed in Werkzeug 3.0. Migrate to the 'scrypt' method.)ÚwarningsÚwarnÚsplitÚencodeÚmapr r Úhashlibr ÚhexÚlenÚDEFAULT_PBKDF2_ITERATIONSÚ pbkdf2_hmacÚhmacÚnewÚ hexdigest) r r r Úargsr$ r% r& r' Zlen_argsÚ hash_nameZ
|
iterationsr r r Ú_hash_internal sT ý
|
|
þ
|
|
|
þ
|
ýr: r( é )r r Ú salt_lengthr c C s, t |}t||| \}}| d| d| S )a Securely hash a password for storage. A password can be compared to a stored hash
|
using :func:`check_password_hash`.
|
|
The following methods are supported:
|
|
- ``scrypt``, more secure but not available on PyPy. The parameters are ``n``,
|
``r``, and ``p``, the default is ``scrypt:32768:8:1``. See
|
:func:`hashlib.scrypt`.
|
- ``pbkdf2``, the default. The parameters are ``hash_method`` and ``iterations``,
|
the default is ``pbkdf2:sha256:600000``. See :func:`hashlib.pbkdf2_hmac`.
|
|
Default parameters may be updated to reflect current guidelines, and methods may be
|
deprecated and removed if they are no longer considered secure. To migrate old
|
hashes, you may generate a new hash when checking an old hash, or you may contact
|
users with a link to reset their password.
|
|
:param password: The plaintext password.
|
:param method: The key derivation function and parameters.
|
:param salt_length: The number of characters to generate for the salt.
|
|
.. versionchanged:: 2.3
|
Scrypt support was added.
|
|
.. versionchanged:: 2.3
|
The default iterations for pbkdf2 was increased to 600,000.
|
|
.. versionchanged:: 2.3
|
All plain hashes are deprecated and will not be supported in Werkzeug 3.0.
|
ú$)r r: )r r r< r ÚhZ actual_methodr r r Úgenerate_password_hashS s r? Úbool)Úpwhashr r c C sF z| dd¡\}}}W n tk
|
r, Y dS X t t|||d |¡S )aA Securely check that the given stored password hash, previously generated using
|
:func:`generate_password_hash`, matches the given password.
|
|
Methods may be deprecated and removed if they are no longer considered secure. To
|
migrate old hashes, you may generate a new hash when checking an old hash, or you
|
may contact users with a link to reset their password.
|
|
:param pwhash: The hashed password.
|
:param password: The plaintext password.
|
|
.. versionchanged:: 2.3
|
All plain hashes are deprecated and will not be supported in Werkzeug 3.0.
|
r= r* Fr )r- r r5 Úcompare_digestr: )rA r r r Zhashvalr r r Úcheck_password_hashx s
|
rC z
|
str | None)Ú directoryÚ pathnamesr c sx | sd} | g}|D ]Z dkr(t ¡ t fddtD s\tj ¡s\ dks\ d¡rb dS | ¡ qt j | S )a2 Safely join zero or more untrusted path components to a base
|
directory to avoid escaping the base directory.
|
|
:param directory: The trusted base directory.
|
:param pathnames: The untrusted path components relative to the
|
base directory.
|
:return: A safe path, otherwise ``None``.
|
Ú.r c 3 s | ]}| kV qd S r r r ©Úfilenamer r r £ s z safe_join.<locals>.<genexpr>z..z../N)
|
Ú posixpathÚnormpathÚanyr
|
ÚosÚpathÚisabsÚ
|
startswithÚappendr )rD rE Úpartsr rG r Ú safe_join s"
|
ÿ
|
þýü rR )r( r; )Ú
|
__future__r r0 r5 rL rI r r+ r r3 Úlistr rM Úaltsepr
|
Ú__annotations__r r: r? rC rR r r r r Ú<module> s& ÿ: ÿ%
|
