U
}c= @ sx d dl Z d dlmZ d dlmZmZmZ d dlmZm Z d dl
m Z d dl m
Z
d dlmZ d dlmZ d d lmZ d d
lmZ d d lmZ d d lmZ d d
lmZ d dl m Z m Z e Z dd Z!G dd dej"Z#G dd dej$Z%G dd dej&Z'G dd dej(Z)G dd dej(Z*G dd d ej+Z,G d d d ej+Z-G d d d ej+Z.G d!d" d"e.Z/G d#d$ d$ej+Z0dS )% N)forms) authenticateget_user_modelpassword_validation)UNUSABLE_PASSWORD_PREFIXidentify_hasher)User)default_token_generator)get_current_site)ValidationError)EmailMultiAlternatives)loader) force_bytes)urlsafe_base64_encode)capfirst)gettext gettext_lazyc C s t d| t d| kS )z
Perform case-insensitive comparison of two identifiers, using the
recommended algorithm from Unicode Technical Report 36, section
2.11.2(B)(2).
NFKC) unicodedata normalizecasefold)s1s2 r =/tmp/pip-unpacked-wheel-7m9rsep5/django/contrib/auth/forms.py_unicode_ci_compare s r c s$ e Zd ZdZdZ fddZ ZS )ReadOnlyPasswordHashWidgetz)auth/widgets/read_only_password_hash.htmlTc s t |||}g }|r"|tr6|dtdi n`z t|}W n& tk
rh |dtdi Y n.X || D ] \}}|t||d qx||d< |S )NlabelzNo password set.z5Invalid password format or unknown hashing algorithm.)r valuesummary)
super get_context
startswithr appendr r
ValueErrorZ safe_summaryitems) selfnamer attrscontextr ZhasherkeyZvalue_ __class__r r r! % s z&ReadOnlyPasswordHashWidget.get_context)__name__
__module__ __qualname__Z
template_nameZ read_onlyr!
__classcell__r r r+ r r ! s r c s e Zd ZeZ fddZ ZS )ReadOnlyPasswordHashFieldc s* | dd | dd t j|| d S )NrequiredFdisabledT)
setdefaultr __init__r& argskwargsr+ r r r5 9 s z"ReadOnlyPasswordHashField.__init__)r- r. r/ r widgetr5 r0 r r r+ r r1 6 s r1 c s( e Zd Z fddZ fddZ ZS )
UsernameFieldc s t dt |S )Nr )r r r to_python)r& r r+ r r r; @ s zUsernameField.to_pythonc s t |dddS )Nnoneusername)Zautocapitalize autocomplete)r widget_attrs)r& r9 r+ r r r? C s
zUsernameField.widget_attrs)r- r. r/ r; r? r0 r r r+ r r: ? s r: c s e Zd ZdZdediZejeddejddide
d Z ejed
ejddidded d Z G d
d dZ
fddZdd Z fddZd fdd Z ZS )UserCreationFormzc
A form that creates a user, with no privileges, from the given username and
password.
password_mismatch' The two password fields didn’t match.PasswordFr> new-passwordr( )r stripr9 help_textzPassword confirmation4Enter the same password as before, for verification.r r9 rF rG c @ s e Zd ZeZdZdeiZdS )zUserCreationForm.Meta)r= r= Nr- r. r/ r modelfieldsr: Z
field_classesr r r r Meta` s rM c s: t j|| | jjj| jkr6d| j| jjj jjd< d S )NT autofocus)r r5 _metarK USERNAME_FIELDrL r9 r( r6 r+ r r r5 e s zUserCreationForm.__init__c C s> | j d}| j d}|r:|r:||kr:t| jd dd|S N password1 password2rA code) cleaned_datagetr error_messagesr& rR rS r r r clean_password2j s z UserCreationForm.clean_password2c
s` t | jd}|r\zt|| j W n. tk
rZ } z| d| W 5 d }~X Y nX d S )NrS ) r _post_cleanrV rW r validate_passwordinstancer Z add_error)r& passworderrorr+ r r r[ t s
z UserCreationForm._post_cleanTc s. t jdd}|| jd |r*| |S )NF)commitrR )r save set_passwordrV )r& r` userr+ r r ra s
zUserCreationForm.save)T)r- r. r/ __doc___rX r CharField
PasswordInputr "password_validators_help_text_htmlrR rS rM r5 rZ r[ ra r0 r r r+ r r@ K s*
r@ c s> e Zd ZeededdZG dd dZ fddZ ZS )UserChangeFormrC u Raw passwords are not stored, so there is no way to see this user’s password, but you can change the password using this form.)r rG c @ s e Zd ZeZdZdeiZdS )zUserChangeForm.Meta__all__r= NrJ r r r r rM s rM c sN t j|| | jd}|r,|jd|_| jd}|rJ|jd|_d S )Nr^ z ../password/user_permissions content_type)r r5 rL rW rG formatZquerysetZselect_related)r& r7 r8 r^ rk r+ r r r5 s zUserChangeForm.__init__) r- r. r/ r1 re r^ rM r5 r0 r r r+ r ri s ri c s e Zd ZdZeejddiddZeje ddej
dd idd
Z e d e d d
Z d fdd Z
dd Zdd Zdd Zdd Z ZS )AuthenticationFormzs
Base class for authenticating users. Extend this to get a form that accepts
username/password logins.
rN TrE )r9 rC Fr> current-passwordr rF r9 z^Please enter a correct %(username)s and password. Note that both fields may be case-sensitive.zThis account is inactive.)
invalid_logininactiveNc s| || _ d| _t j|| tjtj| _| jj p4d}|| j
d _ || j
d j j d< | j
d j
dkrxt| jj| j
d _
dS )z
The 'request' parameter is set for custom auth use by subclasses.
The form data comes in via the standard 'data' kwarg.
N r= Z maxlength)request
user_cacher r5 UserModelrO get_fieldrP username_field
max_lengthrL r9 r( r r verbose_name)r& rt r7 r8 Zusername_max_lengthr+ r r r5 s zAuthenticationForm.__init__c C s\ | j d}| j d}|d k rV|rVt| j||d| _| jd krJ| n | | j | j S )Nr= r^ )r= r^ )rV rW r rt ru get_invalid_login_errorconfirm_login_allowed)r& r= r^ r r r clean s
zAuthenticationForm.cleanc C s |j st| jd dddS )a
Controls whether the given User may log in. This is a policy setting,
independent of end-user authentication. This default behavior is to
allow login by active users, and reject login by inactive users.
If the given user cannot log in, this method should raise a
``ValidationError``.
If the given user may log in, this method should return None.
rr rT N) is_activer rX )r& rc r r r r| s
z(AuthenticationForm.confirm_login_allowedc C s | j S N)ru r& r r r get_user s zAuthenticationForm.get_userc C s t | jd dd| jjidS )Nrq r= )rU params)r rX rx rz r r r r r{ s
z*AuthenticationForm.get_invalid_login_error)N)r- r. r/ rd r: r Z TextInputr= rf re rg r^ rX r5 r} r| r r{ r0 r r r+ r rn s"
rn c @ sZ e Zd ZejeddejddiddZddd Zd
d Z dd d
de
ddddf ddZ dS )PasswordResetFormZEmailrs r> emailrE )r ry r9 Nc C sb t ||}d| }t ||}t||||g} |dk rVt ||}
| |
d | dS )zO
Send a django.core.mail.EmailMultiAlternatives to `to_email`.
Nz text/html)r
Zrender_to_stringjoin
splitlinesr Zattach_alternativesend) r& subject_template_nameemail_template_namer)
from_emailZto_emailhtml_email_template_namesubjectbodyZ
email_messageZ
html_emailr r r send_mail s zPasswordResetForm.send_mailc s6 t t jjf d ddi} fdd|D S )a Given an email, return matching user(s) who should receive a reset.
This allows subclasses to more easily customize the default policies
that prevent inactive users and users with unusable passwords from
resetting their password.
z
%s__iexactr~ Tc 3 s* | ]"}| rt t|r|V qd S r )Zhas_usable_passwordr getattr).0ur email_field_namer r s z.PasswordResetForm.get_users..)rv get_email_field_nameZ_default_managerfilter)r& r Z active_usersr r r get_users s zPasswordResetForm.get_usersz'registration/password_reset_subject.txtz®istration/password_reset_email.htmlFc
C s | j d }
|s$t|} | j} | j}
n| } }
t }| |
D ]X}t||}||
| tt |j
|| ||rpdndd| p|i }| j ||||||d q>dS )zf
Generate a one-use only link for resetting password and send it to the
user.
r httpshttp)r domain site_nameuidrc tokenprotocol)r N)
rV r
r' r rv r r r r r pkZ
make_tokenr )r& Zdomain_overrider r Z use_httpsZtoken_generatorr rt r Zextra_email_contextr Z current_siter r r rc Z
user_emailr) r r r ra s6
zPasswordResetForm.save)N) r- r. r/ r Z
EmailFieldre Z
EmailInputr r r r ra r r r r r s$
r c s e Zd ZdZdediZejedejddidde
d Z ejed
dejddidd Z fd d
Z
dd ZdddZ ZS )SetPasswordFormza
A form that lets a user change set their password without entering the old
password
rA rB z New passwordr> rD rE FrI zNew password confirmationrp c s || _ t j|| d S r rc r r5 r& rc r7 r8 r+ r r r5 P s zSetPasswordForm.__init__c C sL | j d}| j d}|r:|r:||kr:t| jd ddt|| j |S )N
new_password1
new_password2rA rT rV rW r rX r r\ rc rY r r r clean_new_password2T s z#SetPasswordForm.clean_new_password2Tc C s* | j d }| j| |r$| j | jS )Nr rV rc rb ra r& r` r^ r r r ra ` s
zSetPasswordForm.save)T)r- r. r/ rd re rX r rf rg r rh r r r5 r ra r0 r r r+ r r < s$ r c @ sV e Zd ZdZejdediZejeddej dddd d
Z
d d d
gZ dd Z dS )PasswordChangeFormz[
A form that lets a user change their password by entering their old
password.
password_incorrectzAYour old password was entered incorrectly. Please enter it again.z Old passwordFro Tr> rN rE rp old_passwordr r c C s, | j d }| j|s(t| jd dd|S )zB
Validate that the old_password field is correct.
r r rT )rV rc Zcheck_passwordr rX )r& r r r r clean_old_passwordy s
z%PasswordChangeForm.clean_old_passwordN)
r- r. r/ rd r rX re r rf rg r Z field_orderr r r r r r h s
r c s e Zd ZdZdediZdZejedej dddd d
e
d Z ejed ej d
did d
edd Z
fddZdd ZdddZe fddZ ZS )AdminPasswordChangeFormzN
A form used to change the password of a user in the admin interface.
rA rB r2 rC rD Tr rE FrI zPassword (again)r> rH c s || _ t j|| d S r r r r+ r r r5 s z AdminPasswordChangeForm.__init__c C sL | j d}| j d}|r:|r:||kr:t| jd ddt|| j |S rQ r rY r r r rZ s z'AdminPasswordChangeForm.clean_password2c C s* | j d }| j| |r$| j | jS )zSave the new password.rR r r r r r ra s
z AdminPasswordChangeForm.savec s* t j}| jD ]}||krg S qdgS )Nr^ )r changed_datarL )r& datar' r+ r r r s
z$AdminPasswordChangeForm.changed_data)T)r- r. r/ rd re rX Zrequired_css_classr rf rg r rh rR rS r5 rZ ra propertyr r0 r r r+ r r s,
r )1r Zdjangor Zdjango.contrib.authr r r Zdjango.contrib.auth.hashersr r Zdjango.contrib.auth.modelsr Zdjango.contrib.auth.tokensr Z django.contrib.sites.shortcutsr
Zdjango.core.exceptionsr Zdjango.core.mailr Zdjango.templater
Zdjango.utils.encodingr Zdjango.utils.httpr Zdjango.utils.textr Zdjango.utils.translationr r re rv r ZWidgetr ZFieldr1 rf r: Z ModelFormr@ ri ZFormrn r r r r r r r r s2 <NN,