+ THija0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIt^RIHtHt^RIHt^RIHtHt^RIHtHtHtHtHtHtHtH t H!t!H"t"H#t#H$t$H%t%^RI&H't'H(t(H)t)H*t*H+t+^RI,H-t-H.t.H/t/H0t0H1t1.R NR NR NR NR NRNRNRNRNRNRNRNRNRNRNRNRNRNRNRNRNRNRNR NR!NR"NR#NR$NR%NR&NR'NR(NR)NR*NR+NR,NR-NR.NR/NR0NR1NR2NR3Nt2]3!]Ph!] Pj4R4,4t6.RzOt7R5R6.t8R7t9R8t:R9t;]3!] PxP{R:4;'gR;4t>!R<R=4t?]PPtB]B]PP0tDR>tER{R@ltFRAtGRBtHR|RCltIR}RDltJREtKRFtLRGtM]'!]LRH4]'!]MRI4RJRKltNRLRMltORNROltPRPtQRQtRR~RRRSlltSRTRUltTRVtU]UPRW4tWRXRYltXRZR[ltY^tZR\t[R]R^lt\RR_R`llt]RRaRbllt^RRcRdllt_].!ReRfRg7RRhl4t`]a!.RO4tb]a!.RO4tc]a!R8Ri.4tdRRjRkllteR?tf]Pth]hti] P!^4RltkR~Rmltm]k'd] P!4toRn]pR(&M] P!]m!44toRotrRptsRqtt].!RfRrRsRt7^ ]t3Rul4tuRtvRvtwRtxRwtyRxtzRyt{R# ]ldR?tkLui;i)z4passlib.utils -- helpers for writing password hashes) annotationsN)IterableSequence)AnyStr)ExpectedStringErrorExpectedTypeError) AB64_CHARS BASE64_CHARS BCRYPT_CHARS HASH64_CHARS Base64EngineLazyBase64Engine ab64_decode ab64_encode b64s_decode b64s_encodebcrypt64h64h64big)add_docget_method_function join_bytes join_unicodeunicode_or_bytes) classpropertydeprecated_functiondeprecated_method hybrid_methodmemoized_propertyrr r r r r rrrrrrconsteqrgenerate_password getrandbytes getrandstrrr has_crypthas_rounds_info has_salt_infor is_ascii_safeis_crypt_contextis_crypt_handler is_same_codecrrr render_bytesrngrounds_cost_values safe_cryptsaslprepsys_bits test_crypttickto_bytes to_native_str to_unicodeunix_crypt_schemes xor_bytesg?linearlog2 PASSLIB_MAX_PASSWORD_SIZEicP]tRt^}tRtRtRtRtRtRt Rt RR lt R t R t R #) SequenceMixinzw helper which lets result object act like a fixed-length sequence. subclass just needs to provide :meth:`_as_tuple()`. c \R4h)zimplement in subclass)NotImplementedErrorselfs&8/usr/lib/python3/dist-packages/passlib/utils/__init__.py _as_tupleSequenceMixin._as_tuples!"9::r9c 4\VP44#N)reprrDrAs&rC__repr__SequenceMixin.__repr__DNN$%%r9c 0VP4V,#rGrD)rBidxs&&rC __getitem__SequenceMixin.__getitem__s~~$$r9c 4\VP44#rG)iterrDrAs&rC__iter__SequenceMixin.__iter__rKr9c 4\VP44#rG)lenrDrAs&rC__len__SequenceMixin.__len__s4>>#$$r9c (VP4V8H#rGrMrBothers&&rC__eq__SequenceMixin.__eq__s~~5((r9cV^8dQhRR/#)returnint)formats"rC __annotate__SequenceMixin.__annotate__s&&#&r9c 4\VP44#rG)hashrDrAs&rC__hash__SequenceMixin.__hash__rKr9c .VPV4'*#rG)r\rZs&&rC__ne__SequenceMixin.__ne__s;;u%%%r9rbN)__name__ __module__ __qualname____firstlineno____doc__rDrIrOrSrWr\rhrk__static_attributes__rbr9rCr>r>}s/ ;&%&%)&&r9r>c\P!\V44PpV'gR#VP V4pV'dVP \ 9dR#V\V4R,,P \8H#)z*test if function accepts specified keywordFT) inspect signaturer parametersgetkind _VAR_ANY_SETlist _VAR_KEYWORD)funckeyparamsargs&& rCaccepts_keywordrsa   248 9 D DF  **S/C sxx|+ $v,r" # ( (L 88r9Fca \V\4'dV.p\VP4pV'dN\V\4'dV.pVF.o V'd S V9dKS V9gKVP S 4K0 V'EdVEFo \ ;QJdV 3RlV4F 'gK RM RM!V 3RlV44'dKFV'dR\ V4F6wr\S V 4'dMV'gK#\W4'gK6Ms \V4pMeV'd\\ \V44F@wr\W4'gK\V4V , pWx^, ,V 8XgQhM ^pM^pVPVS 4EK V'g\V4VnR#R#)a helper to update mixin classes installed in target class. :param target: target class whose bases will be modified. :param add: class / classes to install into target's base class list. :param remove: class / classes to remove from target's base class list. :param append: by default, prepends mixins to front of list. if True, appends to end of list instead. :param after: optionally make sure all mixins are inserted after this class / classes. :param before: optionally make sure all mixins are inserted before this class / classes. :param dryrun: optionally perform all calculations / raise errors, but don't actually modify the class. c3<<"TFp\VS4xK R#5irG) issubclass).0basemixins& rC 'update_mixin_classes..s=ut:dE**uTFN) isinstancetyper{ __bases__removeany enumeraterrVreversedinserttuple) targetaddrappendbeforeafterdryrunbasesrNrend_idxrs &&&&&&& @rCupdate_mixin_classesrsa>#te !! "E fd # #XFEu|~ U#  sEs=u=sss=u===!*5!1IC!%..v*T":": "2e*C%.x%?MG!$..!%j72$1W~555 &@C LLe $?D  < r9c#"V^8d \R4h\V\4'd(\V4p^pW28dW1,pWVxTpKR#\V\4'dK\ V4p\ P!WQ4p\V4p\ P!T3T4xK?\R4h \dR#i;i5i)z0 split iterable into chunks of elements. zsize must be positive integerzsource must be iterableN) ValueErrorrrrVrrR itertoolsislicenext StopIterationchain TypeError)sourcesizeendinitr chunk_itrfirsts&& rCbatchrs ax899&(##&k gA1+ A FH % %6l!((3I Y//5(I6 6122 !  s*BC B='C= C C C  Cc \V4\V4Jd\h\V\4'dVP 4MTp\V\4'dVP 4MTp\ P !W4#rG)rrrstrencodehmaccompare_digestleftrights&&rCrrsZ Dze$&tS114;;=tD(44ELLN%E   t ++r9cVP4pVPV4'dVRRpV'g.#VPV4Uu.uFq"P4NK up#uupi)zJsplit comma-separated string into list of elements, stripping whitespace. Nrt)stripendswithsplit)rsepelems&& rC splitcommar(sX\\^F s  %+\\#%6 7%6TJJL%6 77 7s A%c \V\4'g\R\V4 24hRP RV44p\ P !RV4pV'g\#\PpV!V^,4'd9V!VR,4'g\RV,4h\PpMTp\PR3\PR3\PR3\PR 3\PR 3\PR 3\P R 3\P"R 3\P$R 3\P&R 3\P(R3VR3. pVFrp\P*!V4'dQR4h\P,!V4'dQR4hVF#wrxV!V4'gK\V RV 24h Kt V#)aNormalizes unicode strings using SASLPrep stringprep profile. The SASLPrep profile is defined in :rfc:`4013`. It provides a uniform scheme for normalizing unicode usernames and passwords before performing byte-value sensitive operations such as hashing. Among other things, it normalizes diacritic representations, removes non-printing characters, and forbids invalid characters such as ``\n``. Properly internationalized applications should run user passwords through this function before hashing. :arg source: unicode string to normalize & validate :param param: Optional noun identifying source parameter in error messages (Defaults to the string ``"value"``). This is mainly useful to make the caller's error messages make more sense contextually. :raises ValueError: if any characters forbidden by the SASLPrep profile are encountered. :raises TypeError: if input is not :class:`!unicode` :returns: normalized unicode string .. note:: This function is not available under Jython, as the Jython stdlib is missing the :mod:`!stringprep` module (`Jython issue 1758320 `_). .. versionadded:: 1.6 zinput must be string, not r:c3"TFGp\P!V4'dK!\P!V4'd\MTxKI R#5irG) stringprep in_table_b1 in_table_c12_USPACE)rcs& rCrsaslprep..fs<A%%a( 5:**1--14sAAANFKCzmalformed bidi sequence in z$unassigned code points forbidden in z control characters forbidden in z$private use characters forbidden in z"non-char code points forbidden in zsurrogate codes forbidden in z!non-plaintext chars forbidden in z!non-canonical chars forbidden in z1display-modifying / deprecated chars forbidden inztagged characters forbidden in zforbidden bidi character in z$failed to strip B.1 in mapping stagez(failed to replace C.1.2 in mapping stager;rt)rrrrjoin unicodedata normalize_UEMPTYr in_table_d1r in_table_d2 in_table_a1in_table_c21_c22 in_table_c3 in_table_c4 in_table_c5 in_table_c6 in_table_c7 in_table_c8 in_table_c9rr) rparamdata is_ral_charis_forbidden_bidi_char forbidden_rr}err_msgs && rCr.r.4sX fc " "4T&\NCDD 77 D   .D ((K4748$$:UBC C!+!7!7"-   !GH  $ $&HI   !GH   !EF   !EF   !EF   !@A   !DE   !DE  " " ?    !BC !?@!J$))!,,T.TT,**1-- 6 -(MDAww G9AeW!566( Kr9c\V\4'dVPR4pT\;QJd.RV4FNK 5M !RV44,pVP R4#)atPeform ``%`` formating using bytes in a uniform manner across Python 2/3. This function is motivated by the fact that :class:`bytes` instances do not support ``%`` or ``{}`` formatting under Python 3. This function is an attempt to provide a replacement: it converts everything to unicode (decoding bytes instances as ``latin-1``), performs the required formatting, then encodes the result to ``latin-1``. Calling ``render_bytes(source, *args)`` should function roughly the same as ``source % args`` under Python 2. .. todo:: python >= 3.5 added back limited support for bytes %, can revisit when 3.3/3.4 is dropped. latin-1c3t"TF.p\V\4'dVPR4MTxK0 R#5i)rN)rbytesdecode)rrs& rCrrender_bytes..s-LPSC!7!7 9S@Ds68)rrrrr)rargsresults&* rCr*r*sa &%  y) eeLPeeLPF == ##r9c.\PVR4#big)ra from_bytesvalues&rC bytes_to_intrs >>% ''r9c&VPVR4#r)r2)rcounts&&rC int_to_bytesrs >>% ''r9z/decode byte string as single big-endian integerz/encode integer as single big-endian byte stringc$V^8dQhRRRRRR/#)r_rrrr`rb)rcs"rCrdrds&MMEM%MEMr9c^\\V4\V4, \V44#)z;Perform bitwise-xor of two byte strings (must be same size))rrrVrs&&rCr6r6s"  T*\%-@@#d) LLr9c$V^8dQhRRRRRR/#)r_rrrrar`rb)rcs"rCrdrds!""&"""r9cX^V^, \V4,,pW,RV#)z= repeat or truncate string, so it has length N)rVrrmults&& rC repeat_stringrs* qS[( (D M5D !!r9c$V^8dQhRRRRRR/#)r_rrrrar`rb)rcs"rCrdrds!..u.C.E.r9cf^V^, \V4,,p\W,V4#)zF variant of repeat_string() which truncates to nearest UTF8 boundary. )rV utf8_truncaters&& rCutf8_repeat_stringrs* qS[( (D  --r9c(V^8dQhRRRRRRRR/#)r_rrrrapadz AnyStr | Noner`rb)rcs"rCrdrds(V3]fr9cVf#\V\4'd\M\p\ V4pW8dWW, ,,#VRV#)z>right-pad or truncate string, so it has length N)rr_UNULL_BNULLrV)rrrlengths&&& rCright_pad_stringrsD {"63//fV [F }t}--- %4=r9c$V^8dQhRRRRRR/#)r_rrindexrar`rb)rcs"rCrdrds!==%===r9cjaa\S\4'g\S\R4h\S4pV^8d\ ^W,4pW8dS#\ V^,V4pW8d"SV,^,^8wdMV^, pK'W8XgQhSRVoVV3RlpV!4'gQhS#)ai helper to truncate UTF8 byte string to nearest character boundary ON OR AFTER . returned prefix will always have length of at least , and will stop on the first byte that's not a UTF8 continuation byte (128 - 191 inclusive). since utf8 should never take more than 4 bytes to encode known unicode values, we can stop after ``index+3`` is reached. rNc<SPR4pTPSPR44'gQhR# \dR#i;i)utf-8T)rUnicodeDecodeError startswith)textrrs rC sanity_check#utf8_truncate..sanity_checksM ==)D v}}W56666 "  s> A  A )rrrrVmaxmin)rrrr rsf& @rCrrs* fe $ $x88 f+C qyAu{# |  eai C + %=4 4 '   ||FU^F  >>> Mr9s aA:#!asciic V^8dQhRRRR/#)r_codecrr`boolrb)rcs"rCrdrd1sBB#B$Br9c:\PV4\8H#)zRTest if codec is compatible with 7-bit ascii (e.g. latin-1, utf-8; but not utf-16))_ASCII_TEST_UNICODEr_ASCII_TEST_BYTES)rs&rCis_ascii_codecr1s  % %e ,0A AAr9c$V^8dQhRRRRRR/#)r_rrrr`rrb)rcs"rCrdrd6s&AAACADAr9cW8XdR#V'd V'gR#\P!V4P\P!V4P8H#)z3Check if two codec names are aliases for same codecTF)codecslookupnamers&&rCr)r)6s; } U ==  # #v}}U';'@'@ @@r9€c V^8dQhRRRR/#)r_rrr`rrb)rcs"rCrdrdCs&&&&T&r9ca\V\4'd\M\o\;QJdV3RlV4F 'dK R# R#!V3RlV44#)z.Fs%f1ufsFT)rr_B80_U80all)rrs&@rCr&r&Cs?65))tA 3%f%33%3%3%f% %%r9c ,V^8dQhRRRRRRRRRR /#) r_rz str | bytesencodingrrsource_encodingz str | Noner`rrb)rcs"rCrdrdIs:&-&- &-&- &- &-  &-r9cV'gQh\V\4'd<V'd2\W14'g!VPV4P V4#V#\V\ 4'dVP V4#\ W4h)aHelper to normalize input to bytes. :arg source: Source bytes/unicode to process. :arg encoding: Target encoding (defaults to ``"utf-8"``). :param param: Optional name of variable/noun to reference when raising errors :param source_encoding: If this is specified, and the source is bytes, the source will be transcoded from *source_encoding* to *encoding* (via unicode). :raises TypeError: if source is not str or bytes. :returns: * unicode strings will be encoded using *encoding*, and returned. * if *source_encoding* is not specified, byte strings will be returned unchanged. * if *source_encoding* is specified, byte strings will be transcoded to *encoding*. )rrr)rrrr)rr$rr%s&&&&rCr2r2Isk> O8&%  =#K#K==188B B &#}}X&& f ,,r9c V^8dQhRRRR/#r_rrr`rrb)rcs"rCrdrdrs--v-3-r9cV'gQh\V\4'dV#\V\4'dVPV4#\ W4h)aHelper to normalize input to unicode. :arg source: source bytes/unicode to process. :arg encoding: encoding to use when decoding bytes instances. :param param: optional name of variable/noun to reference when raising errors. :raises TypeError: if source is not str or bytes. :returns: * returns unicode strings unchanged. * returns bytes strings decoded using *encoding* )rrrrrrr$rs&&&rCr4r4rsD$ O8&# &%  }}X&& f ,,r9c V^8dQhRRRR/#r(rb)rcs"rCrdrds - -& -c -r9c\V\4'dVPV4#\V\4'dV#\ W4h)a#Take in str or bytes, returns str. leaves str alone, decodes bytes using specified encoding. :param source: source unicode or bytes string :param encoding: encoding to use when encoding unicode or decoding bytes :param param: optional name of variable/noun to reference when raising errors )rrrrrr*s&&&rCr3r3s=&%  }}X&&&# f ,,r9z1.6z1.7) deprecatedremovedc\WRR7#)z'deprecated, use to_native_str() insteadrg)r)r3)rr$s&&rC to_hash_strr0s  88r9nonec$V^8dQhRRRRRR/#)r_rzstr | bytes | Noner1z bool | Noner`rb)rcs"rCrdrds$ %0r9c@VR9gQh\V\4'dXVP4P4pV\9dR#V\ 9dR#V\ 9dV#\RV RV: 24h\V\4'dV#VfV#\V4#)zP helper to convert value to boolean. recognizes strings such as "true", "false" TFz unrecognized z value: )TFN) rrlowerr _true_set _false_set _none_setrr)rr1rcleans&&& rCas_boolr9s & && &%)** ##% I  J  I K=xyABB%  } ;r9Tc V^RIHp\VR4'd$\VR4'dVP4pRP T\\R4'd\P!4MR\\44\P!4\4\'d&\P!^ 4PR4M^4p\!V!VP#R44P%4^4# \dTP R 4pLi;i) z.generate prng seed value from system resources)sha512getstate getrandbitsz{} {} {} {:.15f} {:.15f} {}getpidNrri)hashlibr;hasattrr<r@r=rcosr>idobjecttimer1 has_urandomurandomrrar hexdigest)rr;rs& rCgenseedrHsuj!!ge]&C&C /NN$E ) / / r8,, $ 68   ,7K 2i(Q D vdkk'*+557 <<)# /%%g.E /sD D('D(z random.RandomcPaaS'g\#VV3Rlp\V!44#)z]return byte-string containing *count* number of randomly generated bytes, using specified rngc3<"SPS^,4p^pVS8d V^,xV^,pV^, pK&R#5i)N)r=)rrrr+s rChelpergetrandbytes..helper sE + %i$,  aKE FAsAA)_BEMPTYr)r+rrLsff rCr!r!s   ?r9caaaaS^8d \R4h\S4oS^8Xd \R4hS^8Xd SS,#VVVV3Rlp\S\4'dRP V!44#\ V!44#)z|return string containing *count* number of chars/bytes, whose elements are drawn from specified charset, using specified rngzcount must be >= 0zalphabet must not be emptyc3<"SP^SS,4p^pVS8d'SVS,,xVS,pV^, pK-R#5i)N) randrange)rrcharsetrlettersr+s rCrLgetrandstr..helper%sM a%0 %i%'/* * g E FAsA Ar:)rrVrrrr)r+rSrrLrTsfff @rCr"r"s{  qy-..'lG!|566!|'3wwvx  ?r942346789ABCDEFGHJKMNPQRTUVWXYZabcdefghjkmnpqrstuvwxyzz2.0z/passlib.pwd.genword() / passlib.pwd.genphrase())r-r. replacementc"\\W4#)aGgenerate random password using given length & charset :param size: size of password. :param charset: optional string specified set of characters to draw from. the default charset contains all normal alphanumeric characters, except for the characters ``1IiLl0OoS5``, which were omitted due to their visual similarity. :returns: :class:`!str` containing randomly generated password. .. note:: Using the default character set, on a OS with :class:`!SystemRandom` support, this function should generate passwords with 5.7 bits of entropy per character. )r"r+)rrSs&&rCr r 6s2 c7 ))r9ca\;QJd#V3Rl\4F 'dK R# R#!V3Rl\44#)z4check if object follows the :ref:`password-hash-api`c3<<"TFp\SV4xK R#5irGr@rrobjs& rCr#is_crypt_handler.._=ndwsD!!nrFT)r"_handler_attrsr]sfrCr(r(\. 3=n=33=3=3=n= ==r9ca\;QJd#V3Rl\4F 'dK R# R#!V3Rl\44#)zOcheck if object appears to be a :class:`~passlib.context.CryptContext` instancec3<<"TFp\SV4xK R#5irGr[r\s& rCr#is_crypt_context..or_rFT)r"_context_attrsrasfrCr'r'lrbr9cNRVP9;'d\VRR4RJ#)z_check if handler provides the optional :ref:`rounds information ` attributesrounds min_roundsN setting_kwdsgetattrhandlers&rCr$r$xs2 G((( = = G\4 0 <r9cNRVP9;'d\VRR4RJ#)z[check if handler provides the optional :ref:`salt information ` attributessalt min_salt_sizeNrjrms&rCr%r%s4 '&&& @ @ G_d 34 ?r9) sha512_crypt sha256_crypt sha1_cryptbcrypt md5_crypt bsdi_crypt des_crypt)NNFNNF),rrG)rrN)rr)r )truetyesyon1enableenabled)falsefnoroff0disabledisabled)Nboolean)rrk context_kwdsverifyrgidentify) needs_update genconfiggenhashrencryptr)|__conditional_annotations__rq __future__rrrrurmathrArandomrsysrDtimeitrcollections.abcrrtypingr passlib.excrrpasslib.utils.binaryrr r r r r rrrrrrrpasslib.utils.compatrrrrrpasslib.utils.decorrrrrr__all__rar8maxsizer/r5r,rNrrenvironrxMAX_PASSWORD_SIZEr> Parameter VAR_KEYWORDr|VAR_POSITIONALrzrrrrrr.r*rrr6rrrrrrrrrrr)r r!r&r2r4r3r0setr5r6r7r9r# default_timertimerr1rFrEr@rH SystemRandomr+__annotations__Randomr!r" _52charsetr r`r(rfr'r$r%)rs@rCrs:"   .> , , , ,  ,   ,   , , , , , , , , , ,  !, "#, $ %, & ', (), *+, ,-, ./, 01, 23, 45, 67, 89, :;, <=, >?, @ A, BC, DE, FG, HI, JK, L M, NO, PQ, RS, TU, VW, ^ tyy%+ , '    'BCKKtL&&D  ,, g//>>?  9S(l34, 8nb$0(( GH GHM ".  =@('..w7B A & &-R-6 -u5969 I J M N V  0    JJqMK =>,,.C. -- "C 0:D  A z*  *.> >aKs K K*)K*