h:dZddlmZddlmZmZmZddlm Z m Z  ddl m Z ddl m Z ddlmZddlmZdd lZdd lZdd lZej0eZdd lZdd lZdd lZdd lZdd lZer dd l Z ndd l Z dd l"Z"e rdd l#Z# dd l$Z$dd l%Z%dd l&Z&dd l'm(Z(dd l)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6dd l7m8Z8m9Z9m:Z:m;Z;mZ>m?Z?ddlm@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImJZJmKZKmLZLmMZMmNZNmOZOmPZPgdZQeRej4eFr ejn ejddzZUgdZVddgZWddl=mXZXdZYeGdZZeGdZ[eRejjdxsdZ^Gdde_Z`eFr8ejjZcedecejjgZfdZgndZg djd!Zhd"Zid#ZjejZk dd$llmmZjdkd%Zndld&Zoe dld'Zod(ZpeFrd)Zqd*Zrndd+lmsZsmtZtd,Zqd-Zre@eqd.e@erd/d0Zud1Zvd2Zwd3ZxeGd4Zydmd5Zzd6Z{d7Z|e|jd8Z~d9Zd:Zd;ZeGd<Zd=Zdnd>Zdod?ZeFrdod@ZndodAZe@edBe8dCdDEdpdFZeddGjZeddHjZedddIgZdqdJZdKZ ddLlmZdMZd4Ze$r0ePr.dNej$cxkrdOkrnne$j&ZdMZnddPlmZeZd ZeGdQZeFrdMZ edRdSdTZndMZdUZ e@edWdXZe%j8ZeZdYZ ej@dZdMZdmd[ZerejHZnejLeZd\Zd]Zd^Ze8dDd_d`adbefdcZddZdeZdfZdgZdhZdiZy #e$rddlm Z ddlm Z YwxYw#e$rd Z d Z!YYwxYw#e$rd Z$YXwxYw#e$rY"wxYw#e$rd ZYYxYw#e$rd Zd Zd Zd Zd ZdVZYwxYw#e$rd ZYwxYw)rz4passlib.utils -- helpers for writing password hashes)JYTHON) b2a_base64 a2b_base64Error) b64encode b64decode)Sequence)Iterable)lookup)update_wrapperNznot present under Jython)warn) BASE64_CHARS AB64_CHARS HASH64_CHARS BCRYPT_CHARS Base64EngineLazyBase64Engineh64h64bigbcrypt64 ab64_encode ab64_decode b64s_encode b64s_decode)deprecated_functiondeprecated_methodmemoized_property classproperty hybrid_method)ExpectedStringErrorExpectedTypeError)add_doc join_bytesjoin_byte_valuesjoin_byte_elemsirangeimapPY3u join_unicodeunicodebyte_elem_value nextgetterunicode_or_strunicode_or_bytes_typesget_method_functionsuppress_causePYPY)rsys_bitsunix_crypt_schemesrounds_cost_valuesconsteqsaslprep xor_bytes render_bytes is_same_codec is_ascii_safeto_bytes to_unicode to_native_str has_crypt test_crypt safe_crypttickrng getrandbytes getrandstrgenerate_passwordis_crypt_handleris_crypt_contexthas_rounds_info has_salt_infog?) sha512_crypt sha256_crypt sha1_cryptbcrypt md5_crypt bsdi_crypt des_cryptlinearlog2)MissingBackendError PASSLIB_MAX_PASSWORD_SIZEic:eZdZdZdZdZdZdZdZdZ dZ y ) SequenceMixinz helper which lets result object act like a fixed-length sequence. subclass just needs to provide :meth:`_as_tuple()`. ctd)Nzimplement in subclass)NotImplementedErrorselfs X/var/www/html/Resume-Scraper/venv/lib/python3.12/site-packages/passlib/utils/__init__.py _as_tuplezSequenceMixin._as_tuples!"9::rVc4t|jSN)reprrar^s r`__repr__zSequenceMixin.__repr__DNN$%%rVc(|j|Srcra)r_idxs r` __getitem__zSequenceMixin.__getitem__s~~$$rVc4t|jSrc)iterrar^s r`__iter__zSequenceMixin.__iter__rfrVc4t|jSrc)lenrar^s r`__len__zSequenceMixin.__len__s4>>#$$rVc(|j|k(Srcrhr_others r`__eq__zSequenceMixin.__eq__s~~5((rVc&|j| Src)rtrrs r`__ne__zSequenceMixin.__ne__s;;u%%%rVN) __name__ __module__ __qualname____doc__rarerjrmrprtrvrVr`r[r[s*;&%&%)&rVr[ctjt|j}|sy|j |}|r|j t vry|t|dj tk(S)*test if function accepts specified keywordFT) inspect signaturer0 parametersgetkind _VAR_ANY_SETlist _VAR_KEYWORD)funckeyparamsargs r`accepts_keywordrsa""#6t#<=HHjjo 388</d6l2&',, <t |D]$\}} t | rnk|st| |s$nYt|}nL|rHt t|D].\} } t| |st|| z }||dz | k(sJnd}nd}|j| |st||_yy)a helper to update mixin classes installed in target class. :param target: target class whose bases will be modified. :param add: class / classes to install into target's base class list. :param remove: class / classes to remove from target's base class list. :param append: by default, prepends mixins to front of list. if True, appends to end of list instead. :param after: optionally make sure all mixins are inserted after this class / classes. :param before: optionally make sure all mixins are inserted before this class / classes. :param dryrun: optionally perform all calculations / raise errors, but don't actually modify the class. c36K|]}t|ywrc) issubclass).0basemixins r` z'update_mixin_classes..s=t:dE*=rN) isinstancetyper __bases__removeany enumeraterroreversedinserttuple) targetaddrappendbeforeafterdryrunbasesrirend_idxrs @r`update_mixin_classesrsU<#te !! "E fd #XF $Eu|~ U#  $  %E=u==!*5!1 %IC!%.*T6": %e*C%.x%?MGT!$.!%j72$SU|t33 C LLe $? %D  < rVc#~K|dkr tdt|tr(t|}d}||kr||z}||||}||kryyt|trHt |} t j||} t|}t j|f| elements. rzsize must be positive integerrzsource must be iterableN) ValueErrorrr ror rl itertoolsislicenext StopIterationchain TypeError)sourcesizeendinitr chunk_itrfirsts r`batchrs ax899&(#&k #gDA1+ A#g FH %6l!((d3I Y//5(I6 6 122 !  s0AB= 4B=> B. %B=. B:7B=9B::B=ct|trt|ts tdd}n=t|tr"t|ts tdt}n tdt |t |k(}|r|}d}|s|}d}|r!t |D] \}}||z z}dk(St |D]\}}t|t|z z}!dk(S)aCheck two strings/bytes for equality. This function uses an approach designed to prevent timing analysis, making it appropriate for cryptography. a and b must both be of the same type: either str (ASCII only), or any type that supports the buffer protocol (e.g. bytes). Note: If a and b are of different lengths, or if an error occurs, a timing attack could theoretically reveal information about the types and lengths of a and b--but not their values. z)inputs must be both unicode or both bytesFrr)rr+rbytesr(rozipord)leftright is_py3_bytes same_sizetmpresultlrs r`r6r6;s*$ %)GH H D% %'GH H CDD Tc%j(I sE? CAa a!eOF  Q;sE? &CAa c!fs1vo %F & Q;rV)compare_digestc|j}|j|r|dd}|sgS|j|Dcgc]}|jc}Scc}w)zRsplit comma-separated string into list of elements, stripping whitespace. Nr~)stripendswithsplit)rsepelems r` splitcommarsQ\\^F s  &,ll3&7 9dTZZ\ 99 9sAct|tstdt|tj tj tfd|D}tjd|}|stStj}||dr*||dstd|ztj}n|}tj}tj}tj }tj"}tj$} tj&} tj(} tj*} tj,} |D]}|rJd|rJd||rtd |z||rtd |z||rtd |z||rtd |z| |rtd |z| |rtd|z| |rtd|z| |rtd|z| |rtd|z||std|z|S)aNormalizes unicode strings using SASLPrep stringprep profile. The SASLPrep profile is defined in :rfc:`4013`. It provides a uniform scheme for normalizing unicode usernames and passwords before performing byte-value sensitive operations such as hashing. Among other things, it normalizes diacritic representations, removes non-printing characters, and forbids invalid characters such as ``\n``. Properly internationalized applications should run user passwords through this function before hashing. :arg source: unicode string to normalize & validate :param param: Optional noun identifying source parameter in error messages (Defaults to the string ``"value"``). This is mainly useful to make the caller's error messages make more sense contextually. :raises ValueError: if any characters forbidden by the SASLPrep profile are encountered. :raises TypeError: if input is not :class:`!unicode` :returns: normalized unicode string .. note:: This function is not available under Jython, as the Jython stdlib is missing the :mod:`!stringprep` module (`Jython issue 1758320 `_). .. versionadded:: 1.6 z"input must be unicode string, not c3NK|]}|s|rtn|ywrc)_USPACE)rc in_table_b1 in_table_c12s r`rzsaslprep..s+ 1~ ?) s"%NFKCrr~zmalformed bidi sequence in z$failed to strip B.1 in mapping stagez(failed to replace C.1.2 in mapping stagez$unassigned code points forbidden in z control characters forbidden in z$private use characters forbidden in z"non-char code points forbidden in zsurrogate codes forbidden in z!non-plaintext chars forbidden in z!non-canonical chars forbidden in z1display-modifying / deprecated chars forbidden inztagged characters forbidden in zforbidden bidi character in )rr+rr stringpreprrr* unicodedata normalize_UEMPTY in_table_d1r in_table_d2 in_table_a1in_table_c21_c22 in_table_c3 in_table_c4 in_table_c5 in_table_c6 in_table_c7 in_table_c8 in_table_c9)rparamdata is_ral_charis_forbidden_bidi_charrrrrrrrrrrrrs @@r`r7r7s^X fg &f() ) **L((K    D   .D ((K4748$:UBC C!+!7!7"-((K!22((K((K((K((K((K((K((K Eq>I#II?N$NN q>CeKL L A ?%GH H q>CeKL L q>AEIJ J q>@5HI I q>@5HI I q>,.345 5 q>>FG G "! $;eCD D=E@ KrVc&tdtz)zstub for saslprep()z>saslprep() support requires the 'stringprep' module, which is )r]_stringprep_missing_reason)rrs r`r7r7s!#02L#MN NrVct|tr|jd}|td|Dz}|j dS)aPeform ``%`` formating using bytes in a uniform manner across Python 2/3. This function is motivated by the fact that :class:`bytes` instances do not support ``%`` or ``{}`` formatting under Python 3. This function is an attempt to provide a replacement: it converts everything to unicode (decoding bytes instances as ``latin-1``), performs the required formatting, then encodes the result to ``latin-1``. Calling ``render_bytes(source, *args)`` should function roughly the same as ``source % args`` under Python 2. .. todo:: python >= 3.5 added back limited support for bytes %, can revisit when 3.3/3.4 is dropped. latin-1c3bK|]'}t|tr|jdn|)yw)rN)rrdecode)rrs r`rzrender_bytes..,s36),6@U5KCJJy1!$%6s-/)rrrrencode)rrrs r`r9r9sI &% y) e604666F == ##rVc.tj|dSNbig)int from_bytesvalues r` bytes_to_intr2s~~eU++rVc&|j|dSr)r<rcounts r` int_to_bytesr4s~~eU++rV)hexlify unhexlifyc,tt|dS)N)rrrs r`rr9s75>"%%rVc*td|dzz|zS)Nz%%0%dxr)rrs r`rr;s(eQh/5899rVz/decode byte string as single big-endian integerz/encode integer as single big-endian byte stringcVtt|t|z t|S)z;Perform bitwise-xor of two byte strings (must be same size))rrrorrs r`r8r8As"  T*\%-@@#d) LLrVc:d|dz t|zz}||zd|S)zE repeat or truncate string, so it has length rN)rorrmults r` repeat_stringrEs, qS[( (D TM5D !!rVcHd|dz t|zz}t||z|S)zN variant of repeat_string() which truncates to nearest UTF8 boundary. r)ro utf8_truncaters r`utf8_repeat_stringr Ms, qS[( (D $ --rVc~t|}||kDr)|t|trtnt}||||z zzS|d|S)z>right-pad or truncate string, so it has length N)rorr+_UNULL_BNULL)rrpadcurs r`right_pad_stringrXsF f+C cz ;&vw7&VCc48n$$et}rVc6ttsttdt}|dkrt d||z}||k\rSt |dz|}||kr t |dzdk7rn|dz }||kr ||k(sJd|fd}|sJS) a helper to truncate UTF8 byte string to nearest character boundary ON OR AFTER . returned prefix will always have length of at least , and will stop on the first byte that's not a UTF8 continuation byte (128 - 191 inclusive). since utf8 should never take more than 4 bytes to encode known unicode values, we can stop after ``index+3`` is reached. :param bytes source: :param int index: :rtype: bytes rrrNc jd}|jjdsJy#t$rYywxYw)Nutf-8T)rUnicodeDecodeError startswith)textrrs r` sanity_checkz#utf8_truncate..sanity_checksG ==)D v}}W566 "  s7 AA)rrr!romaxminr,)rindexrrrs` @r`r r cs2 fe $x88 f+C qyAus{# |  eai C #+ 6%= )D 0D 8    #+|FU^F  > MrVs aA:#!asciic:tj|tk(S)zRTest if codec is compatible with 7-bit ascii (e.g. latin-1, utf-8; but not utf-16))_ASCII_TEST_UNICODEr_ASCII_TEST_BYTES)codecs r`is_ascii_codecr&s  % %e ,0A AArVcn||k(ry|r|syt|jt|jk(S)z3Check if two codec names are aliases for same codecTF) _lookup_codecnamers r`r:r:s5 u} U   # #}U';'@'@ @@rVr€cdt|trtntt fd|DS)z.s%q1u%s)rr_B80_U80all)rrs @r`r;r;s$65)tA %f% %%rVc|sJt|tr0|r,t||s |j|j |S|St|t r|j |St ||)aHelper to normalize input to bytes. :arg source: Source bytes/unicode to process. :arg encoding: Target encoding (defaults to ``"utf-8"``). :param param: Optional name of variable/noun to reference when raising errors :param source_encoding: If this is specified, and the source is bytes, the source will be transcoded from *source_encoding* to *encoding* (via unicode). :raises TypeError: if source is not unicode or bytes. :returns: * unicode strings will be encoded using *encoding*, and returned. * if *source_encoding* is not specified, byte strings will be returned unchanged. * if *source_encoding* is specified, byte strings will be transcoded to *encoding*. )rrr:rrr+r )rencodingrsource_encodings r`r<r<sd4 O&% =(#K==188B BM FG $}}X&&!&%00rVc|sJt|tr|St|tr|j|St ||)aHelper to normalize input to unicode. :arg source: source bytes/unicode to process. :arg encoding: encoding to use when decoding bytes instances. :param param: optional name of variable/noun to reference when raising errors. :raises TypeError: if source is not unicode or bytes. :returns: * returns unicode strings unchanged. * returns bytes strings decoded using *encoding* )rr+rrr rr1rs r`r=r=s>$ O&'" FE "}}X&&!&%00rVct|tr|j|St|tr|St ||rc)rrrr+r r4s r`r>r>s7 fe $==* *  (M%fe4 4rVct|tr|St|tr|j|St ||rc)rrr+rr r4s r`r>r>s7 fe $M  (==* *%fe4 4rVa>Take in unicode or bytes, return native string. Python 2: encodes unicode using specified encoding, leaves bytes alone. Python 3: leaves unicode alone, decodes bytes using specified encoding. :raises TypeError: if source is not unicode or bytes. :arg source: source unicode or bytes string. :arg encoding: encoding to use when encoding unicode or decoding bytes. this defaults to ``"utf-8"``. :param param: optional name of variable/noun to reference when raising errors. :returns: :class:`str` instance z1.6z1.7) deprecatedremovedct||dS)z'deprecated, use to_native_str() insteadhash)r)r>)rr1s r` to_hash_strr;$s  88rVz true t yes y on 1 enable enabledz#false f no n off 0 disable disablednonec|dvsJt|trK|jj}|tvry|t vry|t vr|Std|d|t|tr|S||St|S)z\ helper to convert value to boolean. recognizes strings such as "true", "false" )TFNTFz unrecognized z value: ) rr/lowerr _true_set _false_set _none_setrbool)rr<rcleans r`as_boolrD-s & &&%/0 ##% I  J  I KuEFF E4   E{rVcttst|tsy |jdy#t$rYywxYw)z UT helper -- test if value is safe to pass to crypt.crypt(); under PY3, can't pass non-UTF8 bytes to crypt.crypt. TrF)crypt_accepts_bytesrrrrrs r`is_safe_crypt_inputrGGs9 *UE": W s + 77)cryptT)rKr)rIrr) nullcontextz*:!xxctrVt|tr|jd}t|vr t dt|tr|jd}nst|t r/|} |jd}|jd|k(sJdt|vr t dt|t r|jd} t5t||}dddtt r|jd}|r |dtvry|S#t$rYywxYw#1swYIxYw#t$rYywxYw)Nrnull character in secretr!z"utf-8 spec says this can't happen!r)rFrr+rrrrrr_NULL_safe_crypt_lock_cryptOSError_invalid_prefixes)secretr:origrs r`rArAs="fg.#]]73FV#$%?@@dG,;;w/D fe,!D$!'w!7 "==1T9E DEF?$%?@@dE*;;w/D %2#FD1F2&%(w/VAY*;;M3.$#$22   s<0DD8 D,$D8 D)(D),D51D88 EEc>t|tr|jd}t|vr t dt|tr|jd}t 5t ||}dddsy|jd}|dtvry|S#1swY+xYw)NrrNr!r) rr+rrOrrPrQrrS)rTr:rs r`rArAs&'*w/ !;<<$({{7+! .- .]]7+Fay--M . .s  BBcyrcr{rTr:s r`rArA]srVaWrapper around stdlib's crypt. This is a wrapper around stdlib's :func:`!crypt.crypt`, which attempts to provide uniform behavior across Python 2 and 3. :arg secret: password, as bytes or unicode (unicode will be encoded as ``utf-8``). :arg hash: hash or config string, as ascii bytes or unicode. :returns: resulting hash as ascii unicode; or ``None`` if the password couldn't be hashed due to one of the issues: * :func:`crypt()` not available on platform. * Under Python 3, if *secret* is specified as bytes, it must be use ``utf-8`` or it can't be passed to :func:`crypt()`. * Some OSes will return ``None`` if they don't recognize the algorithm being used (though most will simply fall back to des-crypt). * Some OSes will return an error string if the input config is recognized but malformed; current code converts these to ``None`` as well. cxt|tsJdt|z|sJdt|||k(S)zcheck if :func:`crypt.crypt` supports specific hash :arg secret: password to test :arg hash: known hash of password to use as reference :returns: True or False z#hash must be unicode_or_str, got %szhash must be non-empty)rr.rrArXs r`r@r@sB dN +;-T :; ))) fd #t ++rVctjd|}|r0td|jdj dDSy)zhelper to parse version stringz(\d+(?:\.\d+)+)c32K|]}t|ywrc)r)rrs r`rz parse_version..sA4SYAsr.N)researchrgroupr)rms r` parse_versionras= $f-AA1771:+;+;C+@AAA rVrc ddlm}t|drt|dr |j}t d|ttdrtjndtttjttr$tjd jd ndfz}t!||j#d j%d S#t$r|j d}YwxYw) z.generate prng seed value from system resourcesr)sha512getstate getrandbitsiz%s %s %s %.15f %.15f %sgetpidN rrr)hashlibrchasattrrdr]rer)osrfidobjecttimerB has_urandomurandomrrr hexdigest)rrcrs r`genseedrqsuj!ge]&C /NN$E & ' r8, $ 68   -8 2i(Q#+  D( vdkk'*+557 <<1# /%%g.E /sC,,D D cBstSfd}t|S)z]return byte-string containing *count* number of randomly generated bytes, using specified rngc3tKjdz}d}|kr|dz|dz}|dz }|kryyw)Nrrr)re)rrrrCs r`helperzgetrandbytes..helperMsJq) %i$,  aKE FA%is288)_BEMPTYr$)rCrrus`` r`rDrDBs!  FH %%rVcdkr tdtdk(r tddk(rzSfd}ttrt |St |S)z|return string containing *count* number of chars/bytes, whose elements are drawn from specified charset, using specified rngrzcount must be >= 0zalphabet must not be emptyrc3|Kjdz}d}|kr|z|z}|dz }|kryyw)Nrr) randrange)rrcharsetrlettersrCs r`ruzgetrandstr..helperfsR a%0 %i%'/* * g E FA%is6<<)rrorr+r*r%)rCrzrrur{s``` @r`rErEWsp  qy-..'lG!|566!|'7#FH%%vx((rV42346789ABCDEFGHJKMNPQRTUVWXYZabcdefghjkmnpqrstuvwxyzz2.0z/passlib.pwd.genword() / passlib.pwd.genphrase())r7r8 replacement c$tt||S)awgenerate random password using given length & charset :param size: size of password. :param charset: optional string specified set of characters to draw from. the default charset contains all normal alphanumeric characters, except for the characters ``1IiLl0OoS5``, which were omitted due to their visual similarity. :returns: :class:`!str` containing randomly generated password. .. note:: Using the default character set, on a OS with :class:`!SystemRandom` support, this function should generate passwords with 5.7 bits of entropy per character. )rErC)rrzs r`rFrFvs, c7D ))rV)r) setting_kwds context_kwdsverifyr:identifyc4tfdtDS)z4check if object follows the :ref:`password-hash-api`c36K|]}t|ywrcrirr)objs r`rz#is_crypt_handler..=dwsD!=r)r/_handler_attrsrs`r`rGrG =n= ==rV) needs_update genconfiggenhashrencryptrc4tfdtDS)zOcheck if object appears to be a :class:`~passlib.context.CryptContext` instancec36K|]}t|ywrcrrs r`rz#is_crypt_context..rr)r/_context_attrsrs`r`rHrHrrVc@d|jvxrt|ddduS)z_check if handler provides the optional :ref:`rounds information ` attributesrounds min_roundsNrgetattrhandlers r`rIrIs+ ,, , = G\4 0 <>rVc@d|jvxrt|ddduS)z[check if handler provides the optional :ref:`salt information ` attributessalt min_salt_sizeNrrs r`rJrJs- g** * @ G_d 34 ?ArV)NNFNNF),rrc)rrN)rr)r!)Nboolean)rzpasslib.utils.compatrbinasciirrr_BinAsciiErrorbase64rrcollections.abcr r ImportError collectionscodecsr r( functoolsr rrlogging getLoggerrwlogmathrjsysrandomr]rrrmr threadingtimeittypeswarningsr passlib.utils.binaryrrrrrrrrrrrrrpasslib.utils.decorrrrrr passlib.excr r!r"r#r$r%r&r'r(r)r*r+r,r-r.r/r0r1r2__all__rmaxsizemaxintr3r4r5rUrvrrenvironrMAX_PASSWORD_SIZErlr[ Parameter VAR_KEYWORDrsetVAR_POSITIONALrrrrr6 str_consteqhmacrrr7r9rrrrr8rr rrrr r$rr#r&r:r-r.r;r<r=r>r;rr?r@rArDrGrHrQr?rOpypy_version_infoLockrPcrypt_needs_lockrJrSrFrrAr@ default_timertimerrBrarornr]rq SystemRandomrCRandomrDrE _52charsetrFrrGrrHrIrJr{rVr`rs":(DD'%(( +$'g''1  @     ?MMMMM ' \ xtxxs  A>D E ),  B% C& 'BCKtL &F&4$$00L g&7&7&F&FGHL == @E9>R(n3>8|  . :}@N$,,,,&: GH GHM".  6AL('..w7BAy& #1J1455  *u5969 288: ; 6<<> ? V  4 s%I ETi3+@+@MIM*9>>+  5&= % #  7D !+ ^#    < ,  ,BJJqMK=B &   C &-- "C &*):D u!RTz*T*2  >   >> AK%%$$$%& @ %?"@Ij   D ("'   _ FI zKs} N')N?=O=O*O8 O)4P'N<;N<? O  O OOO&%O&)O52O58P  P PP