a Qh$@s&ddlZddlZddlZddlmZddlmZddlmZddl m Z m Z m Z ddl mZmZddlmZmZddlmZdd lmZdd lmZejdd d d ZddZd"ddZd#ddZd$ddZd%ddZeee Z!GdddZ"ddZ#GdddZ$GdddZ%Gd d!d!Z&dS)&N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)cached_propertylazy) format_htmlformat_html_join) import_string)gettext)ngettext)maxsizecCs ttjSN)get_password_validatorsrAUTH_PASSWORD_VALIDATORSrr`/var/www/sistema_ama/venv/lib/python3.9/site-packages/django/contrib/auth/password_validation.pyget_default_password_validatorssrc Csfg}|D]X}zt|d}Wn&tyBd}t||dYn0||fi|diq|S)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONS)r ImportErrorrappendget)Zvalidator_config validators validatorklassmsgrrrrs rc Cslg}|durt}|D]D}z|||WqtyX}z||WYd}~qd}~00q|rht|dS)z Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsrerrorrrrvalidate_password)s"r%cCs6|durt}|D]}t|ddd}|||qdS)zy Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcWsdSrr)arrrDz"password_changed..)rgetattr)r r!r"rr&rrrr&<s r&cCs.g}|durt}|D]}||q|S)zG Return a list of all help texts of all configured validators. N)rr get_help_text)r" help_textsrrrrpassword_validators_help_textsHs r-cCs0t|}tdddd|D}|r,td|SdS)z` Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • css|] }|fVqdSrr).0 help_textrrr [r)z6_password_validators_help_text_html..z
      {}
    )r-r r )r"r,Z help_itemsrrr#_password_validators_help_text_htmlTs r2c@s,eZdZdZd ddZd ddZdd ZdS) MinimumLengthValidatorz< Validate that the password is of a minimum length. cCs ||_dSr) min_length)selfr5rrr__init__hszMinimumLengthValidator.__init__NcCs0t||jkr,ttdd|jdd|jiddS)NzNThis password is too short. It must contain at least %(min_length)d character.zOThis password is too short. It must contain at least %(min_length)d characters.Zpassword_too_shortr5codeparams)lenr5rrr6r r!rrrrkszMinimumLengthValidator.validatecCstdd|jd|jiS)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.r5)rr5r6rrrr+ysz$MinimumLengthValidator.get_help_text)r4)N)__name__ __module__ __qualname____doc__r7rr+rrrrr3cs  r3cCs0t|}|d|}t|}|d|ko.||kS)a Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )r;)r max_similarityvalueZpwd_lenZlength_bound_similarityZ value_lenrrrexceeds_maximum_length_ratios rFc@s4eZdZdZdZedfddZd ddZd d ZdS) UserAttributeSimilarityValidatora Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )username first_name last_nameemailgffffff?cCs ||_|dkrtd||_dS)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorrD)r6rLrDrrrr7sz)UserAttributeSimilarityValidator.__init__Nc Cs|sdS|}|jD]}t||d}|rt|ts6q|}td||g}|D]n}t||j|rhqTt ||d |jkrTzt|j |j }Wnty|}Yn0ttddd|idqTqdS)Nz\W+)r'bz4The password is too similar to the %(verbose_name)s.Zpassword_too_similar verbose_namer8)lowerrLr* isinstancestrresplitrFrDr quick_ratio_meta get_fieldrOrr_) r6r r!Zattribute_namerEZ value_lower value_partsZ value_partrOrrrrs:     z)UserAttributeSimilarityValidator.validatecCstdS)NuHYour password can’t be too similar to your other personal information.rXr=rrrr+sz.UserAttributeSimilarityValidator.get_help_text)N)r>r?r@rAZDEFAULT_USER_ATTRIBUTESr7rr+rrrrrGs   rGc@s:eZdZdZeddZefddZd ddZd d ZdS) CommonPasswordValidatora Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). cCsttjdS)Nzcommon-passwords.txt.gz)r__file__resolveparentr=rrrDEFAULT_PASSWORD_LIST_PATHsz2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHc Cs|tjur|j}zDtj|ddd }dd|D|_Wdn1sH0YWnJtyt| }dd|D|_Wdn1s0YYn0dS)NZrtzutf-8)encodingcSsh|] }|qSrstripr/xrrr r)z3CommonPasswordValidator.__init__..cSsh|] }|qSrrarcrrrrer))r[r_gzipopen passwordsOSError)r6Zpassword_list_pathfrrrr7s 2  z CommonPasswordValidator.__init__NcCs&||jvr"ttddddS)NzThis password is too common.Zpassword_too_commonr9)rPrbrhrrXr<rrrrs z CommonPasswordValidator.validatecCstdS)Nu2Your password can’t be a commonly used password.rZr=rrrr+sz%CommonPasswordValidator.get_help_text)N) r>r?r@rArr_r7rr+rrrrr[s    r[c@s"eZdZdZdddZddZdS)NumericPasswordValidatorz= Validate that the password is not entirely numeric. NcCs|rttddddS)Nz"This password is entirely numeric.Zpassword_entirely_numericrk)isdigitrrXr<rrrrs z!NumericPasswordValidator.validatecCstdS)Nu*Your password can’t be entirely numeric.rZr=rrrr+ sz&NumericPasswordValidator.get_help_text)N)r>r?r@rArr+rrrrrls rl)NN)NN)N)N)' functoolsrfrSdifflibrpathlibr django.confrdjango.core.exceptionsrrrdjango.utils.functionalrr django.utils.htmlr r django.utils.module_loadingr django.utils.translationr rXr lru_cacherrr%r&r-r2rRZ"password_validators_help_text_htmlr3rFrGr[rlrrrrs0          :$