§
    Ÿjp:  ã                   ó”  — d dl Z d dlZd dlmZ d dlmZ d dlmZm	Z	 d dl
mZ d dlmZ d dlmZ d dlmZ d d	lmZ d d
lmZ ddlmZmZmZ dZdZdZdZd„ Zd'd„Zd„ Z d„ Z!d(d„Z" ed¦  «        d„ ¦   «         Z#d„ Z$d„ Z% ed¦  «        d(d„¦   «         Z& ed¦  «        d(d„¦   «         Z'd(d„Z(d(d„Z)d„ Z*d „ Z+d!„ Z,d"„ Z-d#„ Z.d$„ Z/d%„ Z0d&„ Z1dS ))é    N)Úapps)Úsettings)ÚImproperlyConfiguredÚPermissionDenied)Úrotate_token©Úconstant_time_compare)ÚRemovedInDjango61Warning)Ú	signature©Úimport_string)Úsensitive_variablesé   )Úuser_logged_inÚuser_logged_outÚuser_login_failedÚ_auth_user_idÚ_auth_user_backendÚ_auth_user_hashÚnextc                 ó0   —  t          | ¦  «        ¦   «         S ©Nr   )Úpaths    úi/var/www/finuniver-perm.ru/html/student/venv/lib/python3.11/site-packages/django/contrib/auth/__init__.pyÚload_backendr      s   € Ø�=˜ÑÔÑ Ô Ð ó    Fc                 óž   — g }t           j        D ],}t          |¦  «        }|                     | r||fn|¦  «         Œ-|st	          d¦  «        ‚|S )Nz\No authentication backends have been defined. Does AUTHENTICATION_BACKENDS contain anything?)r   ÚAUTHENTICATION_BACKENDSr   Úappendr   )Úreturn_tuplesÚbackendsÚbackend_pathÚbackends       r   Ú_get_backendsr$      sr   € Ø€HÝ Ô8ð Oð OˆÝ˜|Ñ,Ô,ˆØ�Š°=ÐM˜ ,Ð/Ð/ÀgÑNÔNÐNÐNØð 
Ý"ð8ñ
ô 
ð 	
ð €Or   c                  ó"   — t          d¬¦  «        S )NF©r    )r$   © r   r   Úget_backendsr(   '   s   € Ý uÐ-Ñ-Ô-Ð-r   c              +   óª   K  — t          d¬¦  «        D ]?\  }}t          |j        ¦  «        }	  |j        | fi |¤Ž n# t          $ r Y Œ5w xY w||fV — Œ@d S )NTr&   )r$   r   ÚauthenticateÚbindÚ	TypeError)ÚrequestÚcredentialsr#   r"   Úbackend_signatures        r   Ú_get_compatible_backendsr0   +   sœ   è è € Ý!.¸TÐ!BÑ!BÔ!Bð $ð $Ñˆ�Ý% gÔ&:Ñ;Ô;Ðð	Ø"ÐÔ" 7Ð:Ð:¨kÐ:Ð:Ð:Ð:øÝð 	ð 	ð 	ð ˆHð	øøøð �|Ð#Ð#Ð#Ð#Ð#ð$ð $s   ­<¼
A	ÁA	c                 ó  — 	 |p| j         }t          |t          ¦  «        st          d|z  ¦  «        ‚nN# t          $ rA t          d¬¦  «        }t          |¦  «        dk    r|d         \  }}nt          d¦  «        ‚Y nw xY w|S )Nz5backend must be a dotted import path string (got %r).Tr&   r   r   z’You have multiple authentication backends configured and therefore must provide the `backend` argument or set the `backend` attribute on the user.)r#   Ú
isinstanceÚstrr,   ÚAttributeErrorr$   ÚlenÚ
ValueError)Úuserr#   r!   Ú_s       r   Ú_get_backend_from_userr9   7   s¸   € ðØÐ)˜Tœ\ˆõ ˜'¥3Ñ'Ô'ð 	ÝØGÈ'ÑQñô ð ð	øõ ð 	ð 	ð 	Ý ¨tÐ4Ñ4Ô4ˆÝˆx‰=Œ=˜AÒÐØ! !œ‰JˆAˆwˆwåð3ñô ð ð ˆwð	øøøð €Ns   ‚	3 ³AA>Á=A>r.   c                 ó†   — t          j        dt           j        ¦  «        }d}| D ]}|                     |¦  «        r|| |<   Œ| S )zµ
    Clean a dictionary of credentials of potentially sensitive info before
    sending to less secure functions.

    Not comprehensive - intended for user_login_failed signal
    z'api|token|key|secret|password|signaturez********************)ÚreÚcompileÚIÚsearch)r.   ÚSENSITIVE_CREDENTIALSÚCLEANSED_SUBSTITUTEÚkeys       r   Ú_clean_credentialsrB   L   sW   € õ œJÐ'PÕRTÔRVÑWÔWÐØ0ÐØð 3ð 3ˆØ ×'Ò'¨Ñ,Ô,ð 	3Ø2ˆK˜ÑøØÐr   c                 óx   — t          ¦   «         j        j                             | j        t
                   ¦  «        S r   )Úget_user_modelÚ_metaÚpkÚ	to_pythonÚsessionÚSESSION_KEY)r-   s    r   Ú_get_user_session_keyrJ   \   s+   € õ ÑÔÔ!Ô$×.Ò.¨w¬½{Ô/KÑLÔLÐLr   c              ƒ   óÆ   K  — | j                              t          ¦  «        ƒ d {V —†}|€t          ¦   «         ‚t	          ¦   «         j        j                             |¦  «        S r   )rH   ÚagetrI   ÚKeyErrorrD   rE   rF   rG   )r-   Úsession_keys     r   Ú_aget_user_session_keyrO   b   s_   è è € ð  œ×,Ò,­[Ñ9Ô9Ð9Ð9Ð9Ð9Ð9Ð9€KØÐÝ‰jŒjÐÝÑÔÔ!Ô$×.Ò.¨{Ñ;Ô;Ð;r   c                 óÚ   — t          | fi |¤ŽD ]3\  }}	  |j        | fi |¤Ž}n# t          $ r Y  nw xY w|€Œ)||_        |c S t	          j        t          t          |¦  «        | ¬¦  «         dS )zC
    If the given credentials are valid, return a User object.
    N©Úsenderr.   r-   )r0   r*   r   r#   r   ÚsendÚ__name__rB   ©r-   r.   r#   r"   r7   s        r   r*   r*   k   s½   € õ
 ":¸'Ð!QÐ!QÀ[Ð!QÐ!Qð ð Ñˆ�ð	Ø'�7Ô'¨Ð?Ð?°;Ð?Ð?ˆDˆDøÝð 	ð 	ð 	ð ˆEˆEð	øøøð ˆ<Øà#ˆŒØˆˆˆõ ÔÝÕ%7¸Ñ%DÔ%DÈgðñ ô ð ð ð s   ”#£
1°1c              ‹   óö   K  — t          | fi |¤ŽD ]9\  }}	  |j        | fi |¤Žƒ d{V —†}n# t          $ r Y  nw xY w|€Œ/||_        |c S t	          j        t          t          |¦  «        | ¬¦  «        ƒ d{V —† dS )zSee authenticate().NrQ   )r0   Úaauthenticater   r#   r   ÚasendrT   rB   rU   s        r   rW   rW   ƒ   sñ   è è € õ ":¸'Ð!QÐ!QÀ[Ð!QÐ!Qð ð Ñˆ�ð	Ø.˜Ô.¨wÐFÐF¸+ÐFÐFÐFÐFÐFÐFÐFÐFˆDˆDøÝð 	ð 	ð 	ð ˆEˆEð	øøøð ˆ<Øà#ˆŒØˆˆˆõ Ô
!ÝÕ%7¸Ñ%DÔ%DÈgðñ ô ð ð ð ð ð ð ð ð ð s   –+«
9¸9c                 óè  — d}|€#| j         }t          j        dt          d¬¦  «         t	          |d¦  «        r|                     ¦   «         }t          | j        v rbt          | ¦  «        |j	        k    s0|rGt          | j                             t          d¦  «        |¦  «        s| j                             ¦   «          n| j                             ¦   «          t          ||¬¦  «        }|j        j	                             |¦  «        | j        t          <   || j        t$          <   || j        t          <   t	          | d¦  «        r|| _         t'          | ¦  «         t)          j        |j        | |¬	¦  «         dS )
zÕ
    Persist a user id and a backend in the request. This way a user doesn't
    have to reauthenticate on every request. Note that data set during
    the anonymous session is retained when the user logs in.
    Ú Nz;Fallback to request.user when user is None will be removed.é   ©Ú
stacklevelÚget_session_auth_hash©r7   r#   r7   ©rR   r-   r7   )r7   ÚwarningsÚwarnr
   Úhasattrr^   rI   rH   rJ   rF   r	   ÚgetÚHASH_SESSION_KEYÚflushÚ	cycle_keyr9   rE   Úvalue_to_stringÚBACKEND_SESSION_KEYr   r   rS   Ú	__class__©r-   r7   r#   Úsession_auth_hashs       r   Úloginrm   ™   sp  € ð Ðà€|ØŒ|ˆÝŒØIÝ$Øð	
ñ 	
ô 	
ð 	
õ ˆtÐ,Ñ-Ô-ð 9Ø ×6Ò6Ñ8Ô8Ðå�g”oÐ%Ð%Ý  Ñ)Ô)¨T¬WÒ4Ð4Øð 5å)Ø”×#Ò#Õ$4°bÑ9Ô9Ð;Lñô ð 5ð ŒO×!Ò!Ñ#Ô#Ð#øàŒ×!Ò!Ñ#Ô#Ð#å$¨$¸Ð@Ñ@Ô@€Gà#'¤:¤=×#@Ò#@ÀÑ#FÔ#F€G„O•KÑ Ø+2€G„OÕ'Ñ(Ø(9€G„OÕ$Ñ%Ýˆw˜ÑÔð ØˆŒÝ�ÑÔÐÝÔ˜tœ~°wÀTÐJÑJÔJÐJÐJÐJr   c              ƒ   ó  K  — d}|€6t          j        dt          d¬¦  «         |                      ¦   «         ƒ d{V —†}t	          |d¦  «        r|                     ¦   «         }| j                             t          ¦  «        ƒ d{V —†rtt          | ¦  «        ƒ d{V —†|j
        k    s6|rSt          | j                             t          d¦  «        ƒ d{V —†|¦  «        s| j                             ¦   «         ƒ d{V —† n| j                             ¦   «         ƒ d{V —† t!          ||¬¦  «        }| j                             t          |j        j
                             |¦  «        ¦  «        ƒ d{V —† | j                             t(          |¦  «        ƒ d{V —† | j                             t          |¦  «        ƒ d{V —† t	          | d¦  «        r|| _        t-          | ¦  «         t/          j        |j        | |¬	¦  «        ƒ d{V —† dS )
zSee login().rZ   Nz>Fallback to request.auser() when user is None will be removed.r[   r\   r^   r_   r7   r`   )ra   rb   r
   Úauserrc   r^   rH   Úahas_keyrI   rO   rF   r	   rL   re   ÚaflushÚ
acycle_keyr9   ÚasetrE   rh   ri   r7   r   r   rX   rj   rk   s       r   Úaloginrt   È   s^  è è € ð Ðà€|ÝŒØLÝ$Øð	
ñ 	
ô 	
ð 	
ð
 —]’]‘_”_Ð$Ð$Ð$Ð$Ð$Ð$ˆåˆtÐ,Ñ-Ô-ð 9Ø ×6Ò6Ñ8Ô8ÐàŒ_×%Ò%¥kÑ2Ô2Ð2Ð2Ð2Ð2Ð2Ð2ð +Ý'¨Ñ0Ô0Ð0Ð0Ð0Ð0Ð0Ð0°D´GÒ;Ð;Øð <å)Ø”o×*Ò*Õ+;¸RÑ@Ô@Ð@Ð@Ð@Ð@Ð@Ð@Ø!ñô ð <ð ”/×(Ò(Ñ*Ô*Ð*Ð*Ð*Ð*Ð*Ð*Ð*øàŒo×(Ò(Ñ*Ô*Ð*Ð*Ð*Ð*Ð*Ð*Ð*å$¨$¸Ð@Ñ@Ô@€Gà
Œ/×
Ò
�{¨D¬J¬M×,IÒ,IÈ$Ñ,OÔ,OÑ
PÔ
PÐPÐPÐPÐPÐPÐPÐPØ
Œ/×
Ò
Õ2°GÑ
<Ô
<Ð<Ð<Ð<Ð<Ð<Ð<Ð<Ø
Œ/×
Ò
Õ/Ð1BÑ
CÔ
CÐCÐCÐCÐCÐCÐCÐCÝˆw˜ÑÔð ØˆŒÝ�ÑÔÐÝ
Ô
 d¤n¸gÈDÐ
QÑ
QÔ
QÐQÐQÐQÐQÐQÐQÐQÐQÐQr   c                 ó  — t          | dd¦  «        }t          |dd¦  «        sd}t          j        |j        | |¬¦  «         | j                             ¦   «          t          | d¦  «        rddlm}  |¦   «         | _	        dS dS )z_
    Remove the authenticated user's ID from the request and flush their session
    data.
    r7   NÚis_authenticatedTr`   r   ©ÚAnonymousUser)
Úgetattrr   rS   rj   rH   rf   rc   Údjango.contrib.auth.modelsrx   r7   ©r-   r7   rx   s      r   Úlogoutr|   ó   sœ   € õ �7˜F DÑ)Ô)€DÝ�4Ð+¨TÑ2Ô2ð ØˆÝÔ ¤¸ÀdÐKÑKÔKÐKØ„O×ÒÑÔÐÝˆw˜ÑÔð 'Ø<Ð<Ð<Ð<Ð<Ð<à$�}‘”ˆŒˆˆð'ð 'r   c              ƒ   óF  K  — t          | dd¦  «        }|� |¦   «         ƒ d{V —†}t          |dd¦  «        sd}t          j        |j        | |¬¦  «        ƒ d{V —† | j                             ¦   «         ƒ d{V —† t          | d¦  «        rddlm}  |¦   «         | _	        dS dS )	zSee logout().ro   Nrv   Tr`   r7   r   rw   )
ry   r   rX   rj   rH   rq   rc   rz   rx   r7   r{   s      r   Úalogoutr~     sá   è è € õ �7˜G TÑ*Ô*€DØÐØ�T‘V”Vˆ|ˆ|ˆ|ˆ|ˆ|ˆ|ˆÝ�4Ð+¨TÑ2Ô2ð ØˆÝ
Ô
 t¤~¸wÈTÐ
RÑ
RÔ
RÐRÐRÐRÐRÐRÐRÐRØ
Œ/×
 Ò
 Ñ
"Ô
"Ð"Ð"Ð"Ð"Ð"Ð"Ð"Ýˆw˜ÑÔð 'Ø<Ð<Ð<Ð<Ð<Ð<à$�}‘”ˆŒˆˆð'ð 'r   c                  óÈ   — 	 t          j        t          j        d¬¦  «        S # t          $ r t          d¦  «        ‚t          $ r t          dt          j        z  ¦  «        ‚w xY w)z?
    Return the User model that is active in this project.
    F)Úrequire_readyz:AUTH_USER_MODEL must be of the form 'app_label.model_name'z@AUTH_USER_MODEL refers to model '%s' that has not been installed)Údjango_appsÚ	get_modelr   ÚAUTH_USER_MODELr6   r   ÚLookupErrorr'   r   r   rD   rD     s„   € ð

ÝÔ$¥XÔ%=ÈUÐSÑSÔSÐSøÝð 
ð 
ð 
Ý"ØHñ
ô 
ð 	
õ ð 
ð 
ð 
Ý"ØNÝÔ&ñ'ñ
ô 
ð 	
ð
øøøs	   ‚" ¢?A!c                 ó�  ‡— ddl m} d}	 t          | ¦  «        }| j        t                   }|t
          j        v rñt          |¦  «        }|                     |¦  «        }t          |d¦  «        r½| j         
                    t          ¦  «        Š‰sd}n$|                     ¦   «         }t          ‰|¦  «        }|ss‰rVt          ˆfd„|                     ¦   «         D ¦   «         ¦  «        r)| j                             ¦   «          || j        t          <   n,| j                             ¦   «          d}n# t$          $ r Y nw xY w|p	 |¦   «         S )z—
    Return the user model instance associated with the given request session.
    If no user is retrieved, return an instance of `AnonymousUser`.
    r   rw   Nr^   Fc              3   ó8   •K  — | ]}t          ‰|¦  «        V — Œd S r   r   ©Ú.0Úfallback_auth_hashÚsession_hashs     €r   ú	<genexpr>zget_user.<locals>.<genexpr>F  óB   øè è € ð ,ð ,à.õ .¨lÐ<NÑOÔOð,ð ,ð ,ð ,ð ,ð ,r   )Úmodelsrx   rJ   rH   ri   r   r   r   Úget_userrc   rd   re   r^   r	   ÚanyÚget_session_auth_fallback_hashrg   rf   rM   ©	r-   rx   r7   Úuser_idr"   r#   Úsession_hash_verifiedrl   rŠ   s	           @r   rŽ   rŽ   '  s™  ø€ ð
 &Ð%Ð%Ð%Ð%Ð%à€Dð$Ý'¨Ñ0Ô0ˆØ”Õ':Ô;ˆð �8Ô;Ð;Ð;Ý" <Ñ0Ô0ˆGØ×#Ò# GÑ,Ô,ˆDå�tÐ4Ñ5Ô5ð $Ø&œ×2Ò2Õ3CÑDÔD�Ø#ð Ø,1Ð)Ð)à(,×(BÒ(BÑ(DÔ(DÐ%Ý,AØ$Ð&7ñ-ô -Ð)ð -ð $ð $ð $­ð ,ð ,ð ,ð ,à26×2UÒ2UÑ2WÔ2Wð,ñ ,ô ,ñ )ô )ð $ð  œ×1Ò1Ñ3Ô3Ð3Ø<M˜œÕ(8Ñ9Ð9àœ×-Ò-Ñ/Ô/Ð/Ø#˜øøõ9 ð ð ð Øˆðøøøð< Ð"�=�=‘?”?Ð"s   ‹!D, Ä,
D9Ä8D9c              ƒ   óN  ‡K  — ddl m} d}	 t          | ¦  «        ƒ d{V —†}| j                             t
          ¦  «        ƒ d{V —†}|t          j        v �r4t          |¦  «        }| 	                    |¦  «        ƒ d{V —†}t          |d¦  «        rú| j                             t          ¦  «        ƒ d{V —†Š‰sd}n8|                     ¦   «         }‰o!t          ‰|                     ¦   «         ¦  «        }|s–‰rst          ˆfd„|                     ¦   «         D ¦   «         ¦  «        rF| j                             ¦   «         ƒ d{V —† | j                             t          |¦  «        ƒ d{V —† n2| j                             ¦   «         ƒ d{V —† d}n# t&          $ r Y nw xY w|p	 |¦   «         S )zSee get_user().r   rw   Nr^   Fc              3   ó8   •K  — | ]}t          ‰|¦  «        V — Œd S r   r   r‡   s     €r   r‹   zaget_user.<locals>.<genexpr>o  rŒ   r   )r�   rx   rO   rH   rL   ri   r   r   r   Ú	aget_userrc   re   r^   r	   r�   r�   rr   rs   rq   rM   r‘   s	           @r   r–   r–   S  sB  øè è € à%Ð%Ð%Ð%Ð%Ð%à€Dð$Ý.¨wÑ7Ô7Ð7Ð7Ð7Ð7Ð7Ð7ˆØ$œ_×1Ò1Õ2EÑFÔFÐFÐFÐFÐFÐFÐFˆð �8Ô;Ð;Ñ;Ý" <Ñ0Ô0ˆGØ ×*Ò*¨7Ñ3Ô3Ð3Ð3Ð3Ð3Ð3Ð3ˆDå�tÐ4Ñ5Ô5ð $Ø%,¤_×%9Ò%9Õ:JÑ%KÔ%KÐKÐKÐKÐKÐKÐK�Ø#ð Ø,1Ð)Ð)à(,×(BÒ(BÑ(DÔ(DÐ%Ø,8ð -Õ=RØ$ d×&@Ò&@Ñ&BÔ&Bñ>ô >Ð)ð -ð $ð $ð $­ð ,ð ,ð ,ð ,à26×2UÒ2UÑ2WÔ2Wð,ñ ,ô ,ñ )ô )ð $ð &œo×8Ò8Ñ:Ô:Ð:Ð:Ð:Ð:Ð:Ð:Ð:Ø%œo×2Ò2Õ3CÐEVÑWÔWÐWÐWÐWÐWÐWÐWÐWÐWà%œo×4Ò4Ñ6Ô6Ð6Ð6Ð6Ð6Ð6Ð6Ð6Ø#˜øøõ9 ð ð ð Øˆðøøøð< Ð"�=�=‘?”?Ð"s   �:F Æ
FÆFc                 ó   — | ›d|j         ›�S )zI
    Return the codename of the permission for the specified action.
    r8   )Ú
model_name)ÚactionÚoptss     r   Úget_permission_codenamer›   |  s   € ð �f�f˜dœo˜oÐ.Ð.r   c                 ó¸   — | j                              ¦   «          t          |d¦  «        r.| j        |k    r%|                     ¦   «         | j         t
          <   dS dS dS )aG  
    Updating a user's password logs out all sessions for the user.

    Take the current request and the updated user object from which the new
    session hash will be derived and update the session hash appropriately to
    prevent a password change from logging out the session from which the
    password was changed.
    r^   N)rH   rg   rc   r7   r^   re   ©r-   r7   s     r   Úupdate_session_auth_hashrž   ƒ  si   € ð „O×ÒÑÔÐÝˆtÐ,Ñ-Ô-ð I°'´,À$Ò2FÐ2FØ,0×,FÒ,FÑ,HÔ,HˆŒÕ(Ñ)Ð)Ð)ðIð IÐ2FÐ2Fr   c              ƒ   óö   K  — | j                              ¦   «         ƒ d{V —† t          |d¦  «        rE| j        |k    r<| j                              t
          |                     ¦   «         ¦  «        ƒ d{V —† dS dS dS )zSee update_session_auth_hash().Nr^   )rH   rr   rc   r7   rs   re   r^   r�   s     r   Úaupdate_session_auth_hashr    ‘  s›   è è € à
Œ/×
$Ò
$Ñ
&Ô
&Ð&Ð&Ð&Ð&Ð&Ð&Ð&ÝˆtÐ,Ñ-Ô-ð S°'´,À$Ò2FÐ2FØŒo×"Ò"Õ#3°T×5OÒ5OÑ5QÔ5QÑRÔRÐRÐRÐRÐRÐRÐRÐRÐRÐRðSð SÐ2FÐ2Fr   )Fr   )2r;   ra   Údjango.appsr   r�   Údjango.confr   Údjango.core.exceptionsr   r   Údjango.middleware.csrfr   Údjango.utils.cryptor	   Údjango.utils.deprecationr
   Údjango.utils.inspectr   Údjango.utils.module_loadingr   Údjango.views.decorators.debugr   Úsignalsr   r   r   rI   ri   re   ÚREDIRECT_FIELD_NAMEr   r$   r(   r0   r9   rB   rJ   rO   r*   rW   rm   rt   r|   r~   rD   rŽ   r–   r›   rž   r    r'   r   r   ú<module>r¬      s§  ðØ 	€	€	€	Ø €€€à +Ð +Ð +Ð +Ð +Ð +Ø  Ð  Ð  Ð  Ð  Ð  Ø IÐ IÐ IÐ IÐ IÐ IÐ IÐ IØ /Ð /Ð /Ð /Ð /Ð /Ø 5Ð 5Ð 5Ð 5Ð 5Ð 5Ø =Ð =Ð =Ð =Ð =Ð =Ø *Ð *Ð *Ð *Ð *Ð *Ø 5Ð 5Ð 5Ð 5Ð 5Ð 5Ø =Ð =Ð =Ð =Ð =Ð =à GÐ GÐ GÐ GÐ GÐ GÐ GÐ GÐ GÐ Gà€Ø*Ð Ø$Ð ØÐ ð!ð !ð !ð
ð 
ð 
ð 
ð.ð .ð .ð	$ð 	$ð 	$ðð ð ð ð* Ð�]Ñ#Ô#ðð ñ $Ô#ððMð Mð Mð<ð <ð <ð Ð�]Ñ#Ô#ðð ð ñ $Ô#ðð. Ð�]Ñ#Ô#ðð ð ñ $Ô#ðð*,Kð ,Kð ,Kð ,Kð^(Rð (Rð (Rð (RðV'ð 'ð 'ð$'ð 'ð 'ð"
ð 
ð 
ð")#ð )#ð )#ðX&#ð &#ð &#ðR/ð /ð /ðIð Ið IðSð Sð Sð Sð Sr   