o
xg> @ s d dl Z d dlZd dlmZ d dlmZmZmZ d dlm Z m
Z
d dl m Z d dl
mZ d dlmZ d dlmZ d d lmZ d d
lmZ d d lmZ d d lmZ d d
lm Z d dl m Z m Z e Z!e "dZ#dd Z$G dd dej%Z&G dd dej'Z(G dd dej)Z*G dd dej+Z,G dd dej+Z-G d d d ej.Z/G d d d ej.Z0G d d! d!ej.Z1G d"d# d#e1Z2G d$d% d%ej.Z3dS )& N)forms) authenticateget_user_modelpassword_validation)UNUSABLE_PASSWORD_PREFIXidentify_hasher)User)default_token_generator)get_current_site)ValidationError)EmailMultiAlternatives)loader) force_bytes)urlsafe_base64_encode)capfirst)gettext gettext_lazyzdjango.contrib.authc C s t d| t d| kS )z
Perform case-insensitive comparison of two identifiers, using the
recommended algorithm from Unicode Technical Report 36, section
2.11.2(B)(2).
NFKC) unicodedata normalizecasefold)s1s2 r ;/usr/lib/python3/dist-packages/django/contrib/auth/forms.py_unicode_ci_compare s r c s$ e Zd ZdZdZ fddZ ZS )ReadOnlyPasswordHashWidgetz)auth/widgets/read_only_password_hash.htmlTc s t |||}g }|r|tr|dtdi n/zt|}W n ty3 |dtdi Y nw || D ]\}}|t||d q;||d< |S )NlabelzNo password set.z5Invalid password format or unknown hashing algorithm.)r valuesummary)
super get_context
startswithr appendr r
ValueError safe_summaryitems) selfnamer attrscontextr hasherkeyvalue_ __class__r r r! ' s z&ReadOnlyPasswordHashWidget.get_context)__name__
__module__ __qualname__
template_name read_onlyr!
__classcell__r r r. r r # s r c s e Zd ZeZ fddZ ZS )ReadOnlyPasswordHashFieldc s. | dd | dd t j|i | d S )NrequiredFdisabledT)
setdefaultr __init__r' argskwargsr. r r r: ; s z"ReadOnlyPasswordHashField.__init__)r0 r1 r2 r widgetr: r5 r r r. r r6 8 s r6 c s( e Zd Z fddZ fddZ ZS )
UsernameFieldc s t dt |S )Nr )r r r to_python)r' r r. r r r@ B s zUsernameField.to_pythonc s i t |dddS )Nnoneusername)autocapitalize autocomplete)r widget_attrs)r' r> r. r r rE E s
zUsernameField.widget_attrs)r0 r1 r2 r@ rE r5 r r r. r r? A s r? c s e Zd ZdZdediZejeddejddide
d Z ejed
ejddidded d Z G d
d dZ
fddZdd Z fddZd fdd Z ZS )UserCreationFormzc
A form that creates a user, with no privileges, from the given username and
password.
password_mismatch' The two password fields didn’t match.PasswordFrD new-passwordr) )r stripr> help_textzPassword confirmation4Enter the same password as before, for verification.r r> rL rM c @ e Zd ZeZdZdeiZdS )zUserCreationForm.Meta)rB rB Nr0 r1 r2 r modelfieldsr?
field_classesr r r r Metab rU c sB t j|i | | jjj| jv r d| j| jjj jjd< d S d S )NT autofocus)r r: _metarR USERNAME_FIELDrS r> r) r; r. r r r: g s zUserCreationForm.__init__c C s> | j d}| j d}|r |r ||kr t| jd dd|S N password1 password2rG code) cleaned_datagetr error_messagesr' r[ r\ r r r clean_password2l s z UserCreationForm.clean_password2c
sf t | jd}|r1z
t|| j W d S ty0 } z
| d| W Y d }~d S d }~ww d S )Nr\ ) r _post_cleanr_ r` r validate_passwordinstancer add_error)r' passworderrorr. r r rd v s
z UserCreationForm._post_cleanTc s. t jdd}|| jd |r| |S )NF)commitr[ )r save set_passwordr_ )r' rj userr. r r rk s
zUserCreationForm.saveT)r0 r1 r2 __doc___ra r CharField
PasswordInputr "password_validators_help_text_htmlr[ r\ rU r: rc rd rk r5 r r r. r rF M s*
rF c s> e Zd ZeededdZG dd dZ fddZ ZS )UserChangeFormrI u Raw passwords are not stored, so there is no way to see this user’s password, but you can change the password using this form.)r rM c @ rP )zUserChangeForm.Meta__all__rB NrQ r r r r rU rV rU c sV t j|i | | jd}|r|jd|_| jd}|r)|jd|_d S d S )Nrh z ../password/user_permissions content_type)r r: rS r` rM formatquerysetselect_related)r' r< r= rh rv r. r r r: s zUserChangeForm.__init__) r0 r1 r2 r6 rp rh rU r: r5 r r r. r rt s rt c s e Zd ZdZeejddiddZeje ddej
dd idd
Z e d e d d
Z d fdd Z
dd Zdd Zdd Zdd Z ZS )AuthenticationFormzs
Base class for authenticating users. Extend this to get a form that accepts
username/password logins.
rW TrK )r> rI FrD current-passwordr rL r> z^Please enter a correct %(username)s and password. Note that both fields may be case-sensitive.zThis account is inactive.)
invalid_logininactiveNc s || _ d| _t j|i | tjtj| _| jj p d}|| j
d _ || j
d j j d< | j
d j
du r@t| jj| j
d _
dS dS )z
The 'request' parameter is set for custom auth use by subclasses.
The form data comes in via the standard 'data' kwarg.
N rB maxlength)request
user_cacher r: UserModelrX get_fieldrY username_field
max_lengthrS r> r) r r verbose_name)r' r r< r= username_max_lengthr. r r r: s zAuthenticationForm.__init__c C sZ | j d}| j d}|d ur*|r*t| j||d| _| jd u r$| | | j | j S )NrB rh )rB rh )r_ r` r r r get_invalid_login_errorconfirm_login_allowed)r' rB rh r r r clean s
zAuthenticationForm.cleanc C s |j s t| jd dddS )a
Controls whether the given User may log in. This is a policy setting,
independent of end-user authentication. This default behavior is to
allow login by active users, and reject login by inactive users.
If the given user cannot log in, this method should raise a
``ValidationError``.
If the given user may log in, this method should return None.
r r] N) is_activer ra )r' rm r r r r s z(AuthenticationForm.confirm_login_allowedc C s | j S N)r r' r r r get_user s zAuthenticationForm.get_userc C s t | jd dd| jjidS )Nr~ rB )r^ params)r ra r r r r r r r s
z*AuthenticationForm.get_invalid_login_errorr )r0 r1 r2 ro r? r TextInputrB rq rp rr rh ra r: r r r r r5 r r r. r r{ s$
r{ c @ s\ e Zd ZejeddejddiddZ ddd Zd
d Z dd d
de
ddddf ddZ dS )PasswordResetFormEmailr rD emailrK )r r r> Nc C s t ||}d| }t ||}t||||g} |dur+t ||}
| |
d z| W dS tyE t d|d j
Y dS w )zO
Send a django.core.mail.EmailMultiAlternatives to `to_email`.
Nz text/htmlz*Failed to send password reset email to %s:rm ) r
render_to_stringjoin
splitlinesr attach_alternativesend Exceptionlogger exceptionpk) r' subject_template_nameemail_template_namer*
from_emailto_emailhtml_email_template_namesubjectbody
email_message
html_emailr r r send_mail s
zPasswordResetForm.send_mailc s: t t jjdi d ddi} fdd|D S )a Given an email, return matching user(s) who should receive a reset.
This allows subclasses to more easily customize the default policies
that prevent inactive users and users with unusable passwords from
resetting their password.
z
%s__iexactr Tc 3 s, | ]}| rt t|r|V qd S r )has_usable_passwordr getattr).0ur email_field_namer r s
z.PasswordResetForm.get_users..Nr )r get_email_field_name_default_managerfilter)r' r active_usersr r r get_users
s
zPasswordResetForm.get_usersz'registration/password_reset_subject.txtz®istration/password_reset_email.htmlFc
C s | j d }
|st|} | j} | j}
n| } }
t }| |
D ],}t||}||
| tt |j
|| ||r8dndd| p>i }| j ||||||d q dS )zf
Generate a one-use only link for resetting password and send it to the
user.
r httpshttp)r domain site_nameuidrm tokenprotocol)r N)
r_ r
r( r r r r r r r r
make_tokenr )r' domain_overrider r use_httpstoken_generatorr r r extra_email_contextr current_siter r r rm
user_emailr* r r r rk s0
zPasswordResetForm.saver ) r0 r1 r2 r
EmailFieldrp
EmailInputr r r r rk r r r r r s
r c s e Zd ZdZdediZejedejddidde
d Z ejed
dejddidd Z fd d
Z
dd ZdddZ ZS )SetPasswordFormza
A form that lets a user change set their password without entering the old
password
rG rH z New passwordrD rJ rK FrO zNew password confirmationr} c || _ t j|i | d S r rm r r: r' rm r< r= r. r r r: W zSetPasswordForm.__init__c C L | j d}| j d}|r |r ||kr t| jd ddt|| j |S )N
new_password1
new_password2rG r] r_ r` r ra r re rm rb r r r clean_new_password2[ s z#SetPasswordForm.clean_new_password2Tc C * | j d }| j| |r| j | jS )Nr r_ rm rl rk r' rj rh r r r rk g s
zSetPasswordForm.savern )r0 r1 r2 ro rp ra r rq rr r rs r r r: r rk r5 r r r. r r C s$ r c @ sX e Zd ZdZi ejdediZejeddej dddd d
Z
g d Z d d
Z dS )PasswordChangeFormz[
A form that lets a user change their password by entering their old
password.
password_incorrectzAYour old password was entered incorrectly. Please enter it again.z Old passwordFr| TrD rW rK r} ) old_passwordr r c C s, | j d }| j|st| jd dd|S )zB
Validate that the old_password field is correct.
r r r] )r_ rm check_passwordr ra )r' r r r r clean_old_password s
z%PasswordChangeForm.clean_old_passwordN)
r0 r1 r2 ro r ra rp r rq rr r field_orderr r r r r r o s r c s e Zd ZdZdediZdZejedej dddd d
e
d Z ejed ej d
did d
edd Z
fddZdd ZdddZe fddZ ZS )AdminPasswordChangeFormzN
A form used to change the password of a user in the admin interface.
rG rH r7 rI rJ Tr rK FrO zPassword (again)rD rN c r r r r r. r r r: r z AdminPasswordChangeForm.__init__c C r rZ r rb r r r rc s z'AdminPasswordChangeForm.clean_password2c C r )zSave the new password.r[ r r r r r rk s
z AdminPasswordChangeForm.savec s* t j}| jD ]
}||vrg S qdgS )Nrh )r changed_datarS )r' datar( r. r r r s
z$AdminPasswordChangeForm.changed_datarn )r0 r1 r2 ro rp ra required_css_classr rq rr r rs r[ r\ r: rc rk propertyr r5 r r r. r r s,
r )4loggingr djangor django.contrib.authr r r django.contrib.auth.hashersr r django.contrib.auth.modelsr django.contrib.auth.tokensr django.contrib.sites.shortcutsr
django.core.exceptionsr django.core.mailr django.templater
django.utils.encodingr django.utils.httpr django.utils.textr django.utils.translationr r rp r getLoggerr r Widgetr Fieldr6 rq r? ModelFormrF rt Formr{ r r r r r r r r s8
<NS,