#ijz%\dZddlZddlZddlZddlZddlZddlmZddlm Z m Z ddl m Z ddl mZddlmZedZd ZGd d eZGd d eZdZdZdZdZd$dZdZd%dZd%dZddddZd&dZGddZ dde dfdZ!dde ddfdZ"Gd d!Z#Gd"d#e#Z$y)'a_ Functions for creating and restoring url-safe signed JSON objects. The format used looks like this: >>> signing.dumps("hello") 'ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv422nZA4sgmk' There are two components here, separated by a ':'. The first component is a URLsafe base64 encoded JSON of the object passed to dumps(). The second component is a base64 encoded hmac/SHA-256 hash of "$first_component:$secret" signing.loads(s) checks the signature and returns the deserialized object. If the signature fails, a BadSignature exception is raised. >>> signing.loads("ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv422nZA4sgmk") 'hello' >>> signing.loads("ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv42-modified") ... BadSignature: Signature "ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv42-modified" does not match You can optionally compress the JSON prior to base64 encoding it to save space, using the compress=True argument. This checks if compression actually helps and only applies compression if the result is a shorter string: >>> signing.dumps(list(range(1, 20)), compress=True) '.eJwFwcERACAIwLCF-rCiILN47r-GyZVJsNgkxaFxoDgxcOHGxMKD_T7vhAml:1QaUaL:BA0thEZrp4FQVXIXuOvYJtLJSrQ' The fact that the string is compressed is signalled by the prefixed '.' at the start of the base64 JSON. There are 65 url-safe characters: the 64 used by url-safe base64 and the ':'. These functions make use of all of them. N)settings)constant_time_compare salted_hmac force_bytes) import_string)_lazy_re_compilez^[A-z0-9-_=]*$>0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzceZdZdZy) BadSignaturezSignature does not match.N__name__ __module__ __qualname____doc__M/var/www/html/office/venv/lib/python3.12/site-packages/django/core/signing.pyr r 5s#rr ceZdZdZy)SignatureExpiredz3Signature timestamp is older than required max_age.Nr rrrrr;s=rrc|dk(ry|dkrdnd}t|}d}|dkDr!t|d\}}t||z}|dkDr!||zS)Nr0->)absdivmodBASE62_ALPHABET)ssignencoded remainders r b62_encoder#AsaAva%3RD AAG a%a} 9!),w6 a% '>rc|dk(ryd}|ddk(r|dd}d}d}|D]}|dztj|z}||zS)Nrrrr)rindex)rr decodeddigits r b62_decoder*MscCx Dts{ abEG>B,!6!6u!==> '>rcJtj|jdS)N=)base64urlsafe_b64encodestrip)rs r b64_encoder0Zs  # #A & , ,T 22rcVdt| dzz}tj||zS)Nr,)lenr-urlsafe_b64decode)rpads r b64_decoder6^s+ 3q6'A+ C  # #AG ,,rcjtt||||jjS)N algorithm)r0rdigestdecode)saltvaluekeyr9s r base64_hmacr?cs- D% :AAC  fhrcdt|zS)Nsdjango.http.cookiesr)r>s r_cookie_signer_keyrAis !K$4 44rrc(dt|d||S)Nzdjango.http.cookies.v2::)r3 cookie_namer<s r_cookie_signer_saltrFns $SYKq{m DDrc ||zSNrrDs r_cookie_signer_legacy_saltrIss  r)r<max_agec tt||j||S#t$rR}tj rA??Bcttj}|ttjt ttj |S)N)r> fallback_keysr<)rrSIGNING_BACKENDrA SECRET_KEYmapSECRET_KEY_FALLBACKS)r<Signers rrLrLsA 833 4F  x22 3,h.K.KL  rceZdZdZdZdZy)JSONSerializerzW Simple wrapper around json to be used in signing.dumps and signing.loads. cNtj|djdS)N),rC) separatorslatin-1)jsondumpsencode)selfobjs rrazJSONSerializer.dumpsszz#*5<r<) serializercompress)TimestampSigner sign_object)rdr>r<rirjs rraras*& s . : : X ; rcBt|||j|||S)z| Reverse of dumps(), raise BadSignature if signature fails. The serializer is expected to accept a bytestring. )r>r<rT)rirJ)rk unsign_object)rr>r<rirJrTs rrfrfs0  d- m rcJeZdZdddddddZd dZdZdZedfd Zefd Z y) rYNrC)r>sepr<r9rTcV|xstj|_||ntj|_||_|xs/|j jd|j j|_ |xsd|_ tj|j rtd|zy)N.sha256zJUnsafe Signer separator: %r (cannot be empty or consist of only A-z0-9-_=))rrVr>rXrTrp __class__rrr<r9 _SEP_UNSAFEmatch ValueError)rcr>rpr<r9rTs r__init__zSigner.__init__s-(--( ..   NN % % NN # #  #.h   TXX &"$'(  'rcn|xs |j}t|jdz|||jS)Nsignerr8)r>r?r<r9)rcr=r>s r signaturezSigner.signatures-oTXX499x/t~~VVrcD||j|j|SrH)rpr{)rcr=s rr z Signer.signs $((DNN5,ABBrc$|j|vrtd|jz|j|jd\}}|jg|jD]"}t ||j ||s |cStd|z)NzNo "%s" found in valuer%zSignature "%s" does not match)rpr rsplitr>rTrr{)rcrPr=sigr>s rrMz Signer.unsigns 88< '7$((BC C!((15 sHH2t112 C$S$..*DE  :S@AArFc|j|}d}|r3tj|}t|t|dz kr|}d}t |j }|rd|z}|j |S)ae Return URL-safe, hmac signed base64 compressed JSON string. If compress is True (not the default), check if compressing using zlib can save some space. Prepend a '.' to signify compression. This is included in the signature, to protect against zip bombs. The serializer is expected to return a bytestring. Fr%Trr)razlibrjr3r0r;r )rcrdrirjrg is_compressed compressedbase64ds rrlzSigner.sign_objectsx|!!#& t,J:#d)a-0! $ T"))+ GmGyy!!rc |j|fi|j}|dddk(}|r|dd}t|}|rtj|}|j |S)Nr%.)rMrbr6r decompressrf)rc signed_objrikwargsrrrgs rrnzSigner.unsign_object sn$++j3F3::<Ra[D( abkG'" ??4(D|!!$''rrH) rrrrxr{r rMr[rlrnrrrrYrYs;sT*WCB+95"24B (rrYc0eZdZdZfdZdfd ZxZS)rkcNtttjSrH)r#inttime)rcs r timestampzTimestampSigner.timestamps#diik*++rcb||j|j}t| |SrH)rprsuperr )rcr=rts rr zTimestampSigner.signs)!488T^^-=>w|E""rc.t||}|j|jd\}}t |}|Xt |t jr|j}tj|z }||kDrtd|d|d|S)zk Retrieve original value and check it wasn't signed more than max_age seconds ago. r%zSignature age z > z seconds) rrMr~rpr*rOdatetime timedelta total_secondsrr)rcr=rJresultragerts rrMzTimestampSigner.unsigns &!==15yy)  '8#5#56!//1))+ )CW}&#w'WXX rrH)rrrrr rM __classcell__)rts@rrkrks,#rrk)sha1)r)z%django.core.signing.get_cookie_signer)%rr-rr`rr django.confrdjango.utils.cryptorrdjango.utils.encodingrdjango.utils.module_loadingrdjango.utils.regex_helperr rur Exceptionr rr#r*r0r6r?rArFrIrRrLr[rarfrYrkrrrrs"H B-5601 R 9  |  3-  5 E 79$  2 2-.SX4   ,J(J(Zfr