հjUddlmZddlZddlZddlZddlZddlZdZdZe dejejfDZ de d<dd d d hd d Ddd DddZddZddZ d ddZddZddZy)) annotationsN>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789i@Bc#2K|]}||dk7s |yw)N/).0seps G/var/www/mission/venv/lib/python3.12/site-packages/werkzeug/security.py r s #/cSjCs z list[str] _os_alt_sepsAUXCONzCONIN$zCONOUT$c#&K|] }d| yw)COMNrrcs r r r +AA3i+u123456789¹²³c#&K|] }d| yw)LPTNrrs r r r rrNULPRNcd|dkr tddjdt|DS)zAGenerate a random string of SALT_CHARS with specified ``length``.rzSalt length must be at least 1.c3NK|]}tjtywN)secretschoice SALT_CHARS)r_s r r zgen_salt..!sE!7>>*-Es#%) ValueErrorjoinrange)lengths r gen_saltr%s. {:;; 77EuV}E EEc~|jd^}}|j}|j}|dk(r]|sd}d}d}n tt|\}}}d|z|z|z} t j |||||| jd |d|d|fS|d k(r|t|} | d k(r d } t} n5| dk(r |d } t} n$| d k(r|d } t|d} n t dt j| ||| jd| d| fSt d|d#t$r t ddwxYw)N:scryptiz'scrypt' takes 3 arguments.)saltnrpmaxmemzscrypt:pbkdf2rsha256z'pbkdf2' takes 2 arguments.zpbkdf2:zInvalid hash method 'z'.) splitencodemapintr!hashlibr)hexlenDEFAULT_PBKDF2_ITERATIONS pbkdf2_hmac) methodr-passwordargs salt_bytespassword_bytesr.r/r0r1len_args hash_name iterationss r _hash_internalrF$sLL%MFTJ__&N AAA Jc4.1aq1q NNZ1Qv ceaS!AaS !   8 t9 q= I2J ]QI2J ]QIT!WJ:; ;   >:z cei[* .   0;<?TI Js D&&D<cLt|}t|||\}}|d|d|S)aDSecurely hash a password for storage. A password can be compared to a stored hash using :func:`check_password_hash`. The following methods are supported: - ``scrypt``, the default. The parameters are ``n``, ``r``, and ``p``, the default is ``scrypt:32768:8:1``. See :func:`hashlib.scrypt`. - ``pbkdf2``, less secure. The parameters are ``hash_method`` and ``iterations``, the default is ``pbkdf2:sha256:600000``. See :func:`hashlib.pbkdf2_hmac`. Default parameters may be updated to reflect current guidelines, and methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param password: The plaintext password. :param method: The key derivation function and parameters. :param salt_length: The number of characters to generate for the salt. .. versionchanged:: 3.1 The default iterations for pbkdf2 was increased to 1,000,000. .. versionchanged:: 2.3 Scrypt support was added. .. versionchanged:: 2.3 The default iterations for pbkdf2 was increased to 600,000. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. $)r%rF)r?r> salt_lengthr-h actual_methods r generate_password_hashrLTs9D K D%fdH=A}_AdV1QC ((r&c |jdd\}}}tjt |||d|S#t$rYywxYw)aASecurely check that the given stored password hash, previously generated using :func:`generate_password_hash`, matches the given password. Methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param pwhash: The hashed password. :param password: The plaintext password. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. rHr4Fr)r5r!hmaccompare_digestrF)pwhashr?r>r-hashvals r check_password_hashrR{sU & S! 4g   ~fdHEaH' RR s< AAc|sd}|g}|D]stjtjj ssj dsbdk(s]j dsLt fdtDs4tjdk(r#t djdDry|jtj|S) aSafely join zero or more untrusted path components to a trusted base directory to avoid escaping the base directory. The untrusted path is assumed to be from/for a URL, such as for serving files. Therefore, it should only use the forward slash ``/`` path separator, and will be joined using that separator. On Windows, the backslash ``\`` separator is not allowed. :param directory: The trusted base directory. :param untrusted: The untrusted path components relative to the base directory. :return: A safe path, otherwise ``None``. .. versionchanged:: 3.1.6 Special device names in multi-segment paths are not allowed on Windows. .. versionchanged:: 3.1.5 More special device names, regardless of extension or trailing spaces, are not allowed on Windows. .. versionchanged:: 3.1.4 Special device names are not allowed on Windows. .rz..z../c3&K|]}|v ywrr)rr parts r r zsafe_join..s733$;7sntc3K|]:}|jddjjtv<yw)rTrN) partitionstripupper_windows_device_files)rr0s r r zsafe_join..s>KK$Q'--/557;PPsAAN) posixpathnormpathospathisabs startswithanyr namer5appendr") directory untrustedpartsrVs @r safe_joinris0  KE !!$' GGMM$ s#t|u%7,774!ZZ_  T/2 >>5 !!r&)r$r8returnstr)r>rkr-rkr?rkrjztuple[str, str])r))r?rkr>rkrIr8rjrk)rPrkr?rkrjbool)rfrkrgrkrjz str | None) __future__rr9rNr_r]rrr<listr altsepr __annotations__r\r%rFrLrRrirr&r rrs"  M %FFBII& i      ,*+  ,*+     F-=b?A$)$)$)8;$)$)NS,8"r&