sgh%JddlZddlZddlZddlmZddlmZddlmZddl m Z m Z m Z ddl mZmZddlmZmZddlmZdd lmZdd lmZej2d Zd Zdd ZddZddZddZeee Z!GddZ"dZ#GddZ$GddZ%GddZ&y)N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)cached_propertylazy) format_htmlformat_html_join) import_string)gettext)ngettextc4ttjSN)get_password_validatorsrAUTH_PASSWORD_VALIDATORSk/var/www/enzed_healthcare/enzed_env/lib/python3.12/site-packages/django/contrib/auth/password_validation.pyget_default_password_validatorsrs "8#D#D EErc g}|D]8} t|d}|j|di|j di:|S#t$rd}t||dzwxYw)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONSr)r ImportErrorrappendget)validator_config validators validatorklassmsgs rrrsJ% A  @!)F"34E %?)-- 2">?@ A  @4 'sYv->'>? ?  @s AAcg}| t}|D]} |j|||r t|y#t$r}|j|Yd}~Ed}~wwxYw)z Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsr errors rvalidate_passwordr*)srF"=?(!  !   x .! f%% ! MM%  !s7 AAAcX| t}|D]}t|dd}|||y)zy Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcyrr)as rz"password_changed..Dsr)rgetattr)r%r&r'r r,s rr,r,<s< "=?() "9.@/R4()rcng}| t}|D]!}|j|j#|S)zG Return a list of all help texts of all configured validators. )rr get_help_text)r' help_textsr s rpassword_validators_help_textsr4HsDJ"=?(5 )11345 rc`t|}tddd|D}|r td|SdS)z` Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • c3"K|]}|f ywrr).0 help_texts r z6_password_validators_help_text_html..[sEYYLEs z
      {}
    )r4r r )r'r3 help_itemss r#_password_validators_help_text_htmlr<Ts= 00CDJ! ME*EJ6@;}j 1GRGrc,eZdZdZddZddZdZdZy) MinimumLengthValidatorz< Validate that the password is of a minimum length. c||_yr) min_length)selfr@s r__init__zMinimumLengthValidator.__init__hs $rNct||jkr(t|jdd|jiy)Npassword_too_shortr@codeparams)lenr@rget_error_messagerAr%r&s rr$zMinimumLengthValidator.validateks? x=4?? *!&&()$doo6  +rcJtdd|j|jzS)NzBThis password is too short. It must contain at least %d character.zCThis password is too short. It must contain at least %d characters.rr@rAs rrIz(MinimumLengthValidator.get_error_messagess* TU  oo   rcNtdd|jd|jizS)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.r@rLrMs rr2z$MinimumLengthValidator.get_help_text}s/ K L OO 4?? + , ,r)r)__name__ __module__ __qualname____doc__rBr$rIr2rrrr>r>cs% ,rr>c\t|}|dz |z}t|}|d|zk\xr||kS)a Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )rH)r%max_similarityvaluepwd_lenlength_bound_similarity value_lens rexceeds_maximum_length_ratior\s@0(mG,q07:E I b9n $ L5L)LLrc4eZdZdZdZedfdZd dZdZdZy) UserAttributeSimilarityValidatora Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )username first_name last_nameemailgffffff?c@||_|dkr td||_y)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorrW)rArdrWs rrBz)UserAttributeSimilarityValidator.__init__s&. C BC C,rNc*|sy|j}|jD]}t||d}|rt|ts#|j}t j d||gz}|D]}t||j|rt||j|jk\sD t |jj|j}t|j!dd|iy#t$r|}Y/wxYw)Nz\W+)r.bpassword_too_similar verbose_namerE)lowerrdr0 isinstancestrresplitr\rWr quick_ratio_meta get_fieldrirrrI) rAr%r&attribute_namerX value_lower value_parts value_partris rr$z)UserAttributeSimilarityValidator.validates >>#"22 ND.$7E 5# 6++-K((6;7;-GK)  /d11:#h*=IIK**+6'* JJ00@MM( *..03 . =   &-6'5 6s4.D DDctdS)Nz4The password is too similar to the %(verbose_name)s._rMs rrIz2UserAttributeSimilarityValidator.get_error_messagesGHHrctdS)NuHYour password can’t be too similar to your other personal information.rwrMs rr2z.UserAttributeSimilarityValidator.get_help_texts V  rr) rPrQrRrSDEFAULT_USER_ATTRIBUTESrBr$rIr2rrrr^r^s+ O'>s- @I rr^c>eZdZdZedZefdZddZdZdZ y) CommonPasswordValidatora Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (unhexed, lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). cVttjjdz S)Nzcommon-passwords.txt.gz)r__file__resolveparentrMs rDEFAULT_PASSWORD_LIST_PATHz2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHs!H~%%'..1JJJrc|tjur |j} tj|dd5}|Dchc]}|j c}|_dddycc}w#1swYyxYw#t $rMt|5}|Dchc]}|j ncc}wc}|_dddYy#1swYYyxYwwxYw)Nrtzutf-8)encoding)r|rgzipopenstrip passwordsOSError)rApassword_list_pathfxs rrBz CommonPasswordValidator.__init__s !8!S!S S!%!@!@  8-tgF 8!56!7!'')!7 8 8!7 8 8 8() 8Q56!7!'')!7!7 8 8 8 8scA6A*A%A*A6%A**A3/A63A66C  B>B'&B>4C >C C C Nc|jj|jvrt|j dy)Npassword_too_commonrF)rjrrrrIrJs rr$z CommonPasswordValidator.validates? >>  ! ! #t~~ 5!&&(*  6rctdS)NzThis password is too common.rwrMs rrIz)CommonPasswordValidator.get_error_messages/00rctdS)Nu2Your password can’t be a commonly used password.rwrMs rr2z%CommonPasswordValidator.get_help_textsEFFrr) rPrQrRrSr rrBr$rIr2rrrr|r|s8KK+E81Grr|c$eZdZdZddZdZdZy)NumericPasswordValidatorz= Validate that the password is not entirely numeric. NcZ|jrt|jdy)Npassword_entirely_numericr)isdigitrrIrJs rr$z!NumericPasswordValidator.validate s/    !&&(0  rctdS)Nz"This password is entirely numeric.rwrMs rrIz*NumericPasswordValidator.get_error_messages566rctdS)Nu*Your password can’t be entirely numeric.rwrMs rr2z&NumericPasswordValidator.get_help_texts=>>rr)rPrQrRrSr$rIr2rrrrrs7?rr)NNr)' functoolsrrmdifflibrpathlibr django.confrdjango.core.exceptionsrrrdjango.utils.functionalr r django.utils.htmlr r django.utils.module_loadingr django.utils.translationrrxrcacherrr*r,r4r<rl"password_validators_help_text_htmlr>r\r^r|rrrrrs #  :;51- FF  && )  H&**Ms%S",,DM<: : z$G$GN??r