o bL6@sddlZddlZddlZddlZddlmZmZddlmZddlm Z ddl m Z ddl m Z ddlmZddlmZmZmZdd lmZdd lmZdd lmZejejZGd d d eZGdddeZGdddZ dS)N)datetime timedelta)settings)SuspiciousSession)signing)SuspiciousOperation)timezone)constant_time_compareget_random_string salted_hmac)RemovedInDjango40Warning) import_string)LANGUAGE_SESSION_KEYc@eZdZdZdS) CreateErrorz Used internally as a consistent exception type to catch from save (see the docstring for SessionBase.save() for details). N__name__ __module__ __qualname____doc__rrd/var/www/secure340b-portal/env/lib/python3.10/site-packages/django/contrib/sessions/backends/base.pyrsrc@r) UpdateErrorzF Occurs if Django tries to update a session that was deleted. Nrrrrrr src@seZdZdZdZdZeZd\ddZddZ d d Z d d Z d dZ e ddZd\ddZefddZddZddZddZddZddZdd Zd!d"Zd#d$Zd%d&Zd'd(Zd)d*Zd+d,Zd-d.Zd/d0Zd1d2Zd3d4Z d5d6Z!d7d8Z"d9d:Z#d;d<Z$d=d>Z%e e$Z&e e$e%Z'd]d@dAZ(e e(Z)dBdCZ*dDdEZ+dFdGZ,dHdIZ-dJdKZ.dLdMZ/dNdOZ0dPdQZ1dRdSZ2d]dTdUZ3d\dVdWZ4dXdYZ5e6dZd[Z7dS)^ SessionBasez- Base class for all Session classes. Z testcookieZworkedNcCs"||_d|_d|_ttj|_dS)NF) _session_keyaccessedmodifiedr rZSESSION_SERIALIZER serializerself session_keyrrr__init__0szSessionBase.__init__cC ||jvSN_sessionrkeyrrr __contains__6 zSessionBase.__contains__cCs"|tkr tjdtdd|j|S)NzThe user language will no longer be stored in request.session in Django 4.0. Read it from request.COOKIES[settings.LANGUAGE_COOKIE_NAME] instead.) stacklevel)rwarningswarnr r%r&rrr __getitem__9s  zSessionBase.__getitem__cCs||j|<d|_dSNTr%rrr'valuerrr __setitem__Cs  zSessionBase.__setitem__cCs|j|=d|_dSr/r0r&rrr __delitem__Gs zSessionBase.__delitem__cCs d|jjS)Nzdjango.contrib.sessions.) __class__rrrrrkey_saltKs zSessionBase.key_saltcCs|j||Sr#)r%get)rr'defaultrrrr8OszSessionBase.getcCs:|jp||jv|_||jurdn|f}|jj|g|RS)Nr)rr%_SessionBase__not_givenpop)rr'r9argsrrrr;RszSessionBase.popcCs(||jvr |j|Sd|_||j|<|Sr/r0r1rrr setdefaultWs   zSessionBase.setdefaultcCs|j||j<dSr#)TEST_COOKIE_VALUETEST_COOKIE_NAMEr6rrrset_test_cookie_szSessionBase.set_test_cookiecCs||j|jkSr#)r8r?r>r6rrrtest_cookie_workedbszSessionBase.test_cookie_workedcCs ||j=dSr#)r?r6rrrdelete_test_cookiees zSessionBase.delete_test_cookiecCsd|jj}t||S)Nzdjango.contrib.sessions)r5rr hexdigest)rr2r7rrr_hashhs zSessionBase._hashcCs*tjdkr ||Stj||j|jddS)zGReturn the given session dictionary serialized and encoded as a string.sha1T)saltrcompress)rZDEFAULT_HASHING_ALGORITHM_legacy_encoderdumpsr7r)r session_dictrrrencodems   zSessionBase.encodec Csz tj||j|jdWStjy3z||WYSty2td}| diYYSwty@||YSw)N)rFrz!django.security.SuspiciousSessionSession data corrupted) rloadsr7rZ BadSignature_legacy_decode Exceptionlogging getLoggerwarning)r session_dataloggerrrrdecodews     zSessionBase.decodecCs4||}||}t|d|dS)N:ascii)rrIrDbase64 b64encoderKrU)rrJ serializedhashrrrrHs zSessionBase._legacy_encodec Cst|d}z |dd\}}||}t||s!td| |WSt yQ}zt |t rEt d|jj}|t|iWYd}~Sd}~ww)NrWrVrLzdjango.security.%s)rX b64decoderKsplitrDr rUrrrMrO isinstancerrPrQr5rrRstr)rrSZ encoded_datar[rZZ expected_hasherTrrrrNs  zSessionBase._legacy_decodecCs|j|d|_dSr/)r%updater)rZdict_rrrrbs  zSessionBase.updatecCr"r#r$r&rrrhas_keyr)zSessionBase.has_keycC |jSr#)r%keysr6rrrrer)zSessionBase.keyscCrdr#)r%valuesr6rrrrfr)zSessionBase.valuescCrdr#)r%itemsr6rrrrgr)zSessionBase.itemscCsi|_d|_d|_dSr/)_session_cacherrr6rrrclears zSessionBase.clearcCs(z |j o|j WStyYdSw)zBReturn True when there is no session_key and the session is empty.T)rrhAttributeErrorr6rrris_emptys  zSessionBase.is_emptycCs tdt}||s |Sq)z)Return session key that isn't being used.T )r VALID_KEY_CHARSexistsrrrr_get_new_session_keys   z SessionBase._get_new_session_keycCs|jdur ||_|jSr#)rror6rrr_get_or_create_session_keys  z&SessionBase._get_or_create_session_keycCs|ot|dkS)z Key must be truthy and at least 8 characters long. 8 characters is an arbitrary lower bound for some minimal key security. )lenr&rrr_validate_session_keysz!SessionBase._validate_session_keycCs|jSr#)_SessionBase__session_keyr6rrr_get_session_keyzSessionBase._get_session_keycCs||r ||_dSd|_dS)zV Validate session key on assignment. Invalid values will set to None. N)rsrtrr2rrr_set_session_keys   zSessionBase._set_session_keyFcCsLd|_z|jWSty%|jdus|ri|_Y|jS||_Y|jSw)z Lazily load session from storage (unless "no_load" is True, when only an empty dict is stored) and store it in the current instance. TN)rrhrjr load)rZno_loadrrr _get_sessions  zSessionBase._get_sessioncCstjSr#)rZSESSION_COOKIE_AGEr6rrrget_session_cookie_agervz"SessionBase.get_session_cookie_agecKsz|d}Wn tyt}Ynwz|d}Wnty(|d}Ynw|s/|St|ts6|S||}|jd|jS)zGet the number of seconds until the session expires. Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. modificationexpiry_session_expiryiQ) KeyErrorrnowr8r{r_rdaysseconds)rkwargsr|r}deltarrrget_expiry_ages       zSessionBase.get_expiry_agecKszz|d}Wn tyt}Ynwz|d}Wnty(|d}Ynwt|tr0|S|p5|}|t|dS)zGet session the expiry date (as a datetime object). Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. r|r}r~)r)rrrr8r_rr{r)rrr|r}rrrget_expiry_dates       zSessionBase.get_expiry_datecCsL|durz|d=WdStyYdSwt|tr t|}||d<dS)a* Set a custom expiration for the session. ``value`` can be an integer, a Python ``datetime`` or ``timedelta`` object or ``None``. If ``value`` is an integer, the session will expire after that many seconds of inactivity. If set to ``0`` then the session will expire on browser close. If ``value`` is a ``datetime`` or ``timedelta`` object, the session will expire at that specific future time. If ``value`` is ``None``, the session uses the global session expiry policy. Nr~)rr_rrrrwrrr set_expiry$s    zSessionBase.set_expirycCs"|ddur tjS|ddkS)a Return ``True`` if the session is set to expire when the browser closes, and ``False`` if there's an expiry date. Use ``get_expiry_date()`` or ``get_expiry_age()`` to find the actual expiry date/age, if there is one. r~Nr)r8rZSESSION_EXPIRE_AT_BROWSER_CLOSEr6rrrget_expire_at_browser_close>sz'SessionBase.get_expire_at_browser_closecCs||d|_dS)zc Remove the current session data from the database and regenerate the key. N)rideleterr6rrrflushIs zSessionBase.flushcCs0|j}|j}|||_|r||dSdS)zU Create a new session key, while retaining the current session data. N)r%r createrhr)rdatar'rrr cycle_keyRszSessionBase.cycle_keycCtd)zF Return True if the given session_key already exists. z9subclasses of SessionBase must provide an exists() methodNotImplementedErrorrrrrrn_zSessionBase.existscCr)z Create a new session instance. Guaranteed to create a new object with a unique key and will have saved the result once (with empty data) before the method returns. z8subclasses of SessionBase must provide a create() methodrr6rrrrezSessionBase.createcCr)z Save the session data. If 'must_create' is True, create a new session object (or raise CreateError). Otherwise, only update an existing object and don't create one (raise UpdateError if needed). z6subclasses of SessionBase must provide a save() methodr)rZ must_createrrrsavemrzSessionBase.savecCr)zx Delete the session data under this key. If the key is None, use the current session key value. z8subclasses of SessionBase must provide a delete() methodrrrrrruszSessionBase.deletecCr)z@ Load the session data and return a dictionary. z6subclasses of SessionBase must provide a load() methodrr6rrrry|rzSessionBase.loadcCr)a Remove expired sessions from the session store. If this operation isn't possible on a given backend, it should raise NotImplementedError. If it isn't necessary, because the backend has a built-in expiration mechanism, it should be a no-op. z.This backend does not support clear_expired().r)clsrrr clear_expireds zSessionBase.clear_expiredr#)F)8rrrrr?r>objectr:r!r(r.r3r4propertyr7r8r;r=r@rArBrDrKrUrHrNrbrcrerfrgrirkrorprsrurxr rrzr%r{rrrrrrrnrrrry classmethodrrrrrr'sj             r)!rXrPstringr,rrZ django.confrZ"django.contrib.sessions.exceptionsrZ django.corerZdjango.core.exceptionsrZ django.utilsrZdjango.utils.cryptor r r Zdjango.utils.deprecationr Zdjango.utils.module_loadingr Zdjango.utils.translationrascii_lowercasedigitsrmrOrrrrrrrs$