j%fddlZddlZddlZddlmZddlmZddlmZddl m Z m Z m Z ddl mZmZddlmZmZddlmZdd lmZdd lmZejd Zd Zdd ZddZddZddZeee Z!GddZ"dZ#GddZ$GddZ%GddZ&dS)N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)cached_propertylazy) format_htmlformat_html_join) import_string)gettext)ngettextc4ttjSN)get_password_validatorsrAUTH_PASSWORD_VALIDATORSt/var/www/finuniver-perm.ru/html/student/venv/lib/python3.11/site-packages/django/contrib/auth/password_validation.pyget_default_password_validatorsrs "8#D E EErc g}|D]p} t|d}n(#t$rd}t||dzwxYw||di|diq|S)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONSr)r ImportErrorrappendget)validator_config validators validatorklassmsgs rrrsJ% A A  @!)F"344EE @ @ @4 'sYv->'>?? ?  @ %%??)-- 2">">??@@@@ s %Acg}|t}|D]E} |||#t$r}||Yd}~>d}~wwxYw|rt|dS)z Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsr errors rvalidate_passwordr*)sF"=??(!!  !   x . . . . ! ! ! MM%  ! &f%%%&&s/ AAAcl|t}|D] }t|dd}|||!dS)zy Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcdSrr)as rz"password_changed..DsTr)rgetattr)r%r&r'r r,s rr,r,<sZ "=??()) "9.@//RR4(((())rcg}|t}|D])}||*|S)zG Return a list of all help texts of all configured validators. )rr get_help_text)r' help_textsr s rpassword_validators_help_textsr4HsSJ"=??(55 )11334444 rc~t|}tddd|D}|rtd|ndS)z` Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • c3K|]}|fVdSrr).0 help_texts r z6_password_validators_help_text_html..[s$EEYYLEEEEEErz
      {}
    )r4r r )r'r3 help_itemss r#_password_validators_help_text_htmlr<TsT 00CDDJ! MEE*EEEJ6@ G;}j 1 1 1RGrc.eZdZdZddZd dZdZdZdS) MinimumLengthValidatorz< Validate that the password is of a minimum length. c||_dSr) min_length)selfrAs r__init__zMinimumLengthValidator.__init__hs $rNct||jkr+t|dd|jidS)Npassword_too_shortrAcodeparams)lenrArget_error_messagerBr%r&s rr$zMinimumLengthValidator.validateksP x==4? * *!&&(()$do6  + *rc>tdd|j|jzS)NzBThis password is too short. It must contain at least %d character.zCThis password is too short. It must contain at least %d characters.rrArBs rrJz(MinimumLengthValidator.get_error_messagess+ TU   o   rcBtdd|jd|jizS)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.rArMrNs rr2z$MinimumLengthValidator.get_help_text}s0 K L O  4? + , ,r)r?r)__name__ __module__ __qualname____doc__rCr$rJr2rrrr>r>csd%%%%   ,,,,,rr>clt|}|dz |z}t|}|d|zko||kS)a Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )rI)r%max_similarityvaluepwd_lenlength_bound_similarity value_lens rexceeds_maximum_length_ratior\sD0(mmG,q07:E I b9n $ L5L)LLrc6eZdZdZdZedfdZd dZdZdZdS) UserAttributeSimilarityValidatora Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )username first_name last_nameemailgffffff?cL||_|dkrtd||_dS)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorrW)rBrdrWs rrCz)UserAttributeSimilarityValidator.__init__s2. C  BCC C,rNcV|sdS|}|jD]}t||d}|rt|ts,|}t jd||gz}|D]}t||j|rt|| |jkrf t |j |j }n#t$r|}YnwxYwt|dd|i dS)Nz\W+)r.bpassword_too_similar verbose_namerF)lowerrdr0 isinstancestrresplitr\rWr quick_ratio_meta get_fieldrirrrJ) rBr%r&attribute_namerX value_lower value_parts value_partris rr$z)UserAttributeSimilarityValidator.validatesu  F>>##"2  ND.$77E  5# 6 6 ++--K(6;77;-GK)   /d1:#h*===IIKK*++6'* J00@@M(( -666'5 6)..003 . =+     s,C.. C=<C=c tdS)Nz4The password is too similar to the %(verbose_name)s._rNs rrJz2UserAttributeSimilarityValidator.get_error_messagesGHHHrc tdS)NuHYour password can’t be too similar to your other personal information.rwrNs rr2z.UserAttributeSimilarityValidator.get_help_texts V   rr) rPrQrRrSDEFAULT_USER_ATTRIBUTESrCr$rJr2rrrr^r^sv  O'>s---- @III     rr^cFeZdZdZedZefdZddZdZdZ dS) CommonPasswordValidatora Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (unhexed, lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). c^ttjdz S)Nzcommon-passwords.txt.gz)r__file__resolveparentrNs rDEFAULT_PASSWORD_LIST_PATHz2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHs#H~~%%''.1JJJrcJ|tjur|j} tj|dd5}d|D|_ddddS#1swxYwYdS#t $r>t|5}d|D|_dddYdS#1swxYwYYdSwxYw)Nrtzutf-8)encodingc6h|]}|Srstripr8xs r z3CommonPasswordValidator.__init__.. !7!7!7!''))!7!7!7rc6h|]}|Srrrs rrz3CommonPasswordValidator.__init__..rr)r|rgzipopen passwordsOSError)rBpassword_list_pathfs rrCz CommonPasswordValidator.__init__sW !8!S S S!%!@  8-tgFFF 8!!7!7Q!7!7!7 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8()) 8Q!7!7Q!7!7!7 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8sXAA  A AAAAB"3B B"B B"B B"!B"Nc||jvr#t|ddS)Npassword_too_commonrG)rjrrrrJrKs rr$z CommonPasswordValidator.validatesV >>   ! ! # #t~ 5 5!&&((*  6 5rc tdS)NzThis password is too common.rwrNs rrJz)CommonPasswordValidator.get_error_messages/000rc tdS)Nu2Your password can’t be a commonly used password.rwrNs rr2z%CommonPasswordValidator.get_help_textsEFFFrr) rPrQrRrSr rrCr$rJr2rrrr|r|sKK_K+E8888111GGGGGrr|c&eZdZdZddZdZdZdS)NumericPasswordValidatorz= Validate that the password is not entirely numeric. Nct|r#t|ddS)Npassword_entirely_numericr)isdigitrrJrKs rr$z!NumericPasswordValidator.validate sI      !&&((0   rc tdS)Nz"This password is entirely numeric.rwrNs rrJz*NumericPasswordValidator.get_error_messages5666rc tdS)Nu*Your password can’t be entirely numeric.rwrNs rr2z&NumericPasswordValidator.get_help_texts=>>>rr)rPrQrRrSr$rJr2rrrrrsP777?????rr)NNr)' functoolsrrmdifflibrpathlibr django.confrdjango.core.exceptionsrrrdjango.utils.functionalr r django.utils.htmlr r django.utils.module_loadingr django.utils.translationrrxrcacherrr*r,r4r<rl"password_validators_help_text_htmlr>r\r^r|rrrrrsR ######  :9999999;;;;;;;;555555111111------ FFF    &&&&& ) ) ) )     H H H H&*T*Ms%S%S",,,,,,,,DMMM<: : : : : : : : z$G$G$G$G$G$G$G$GN??????????r