a xd3"@sddlZddlmZddlmZddlmZddlmZm Z ddl m Z ddl m Z ddlmZdd lmZdd lmZdd lmZdd lmZdd lmZmZmZmZddlmZm Z m!Z!ddl"m#Z#m$Z$m%Z%eZ&gdZ'e(eddZ)e(eddZ*ddZ+GdddeZ,GdddeZ-GdddeZ.Gddde,eZ/Gdd d e-eZ0Gd!d"d"e.eZ1e,2Z3e-2Z4e.2Z5dS)#N) timedelta)settings)get_user_model)validate_passwordget_password_validators)ValidationError)timezone) gettext_lazy) exceptions)GenericAPIView)Response)GenericViewSet)ResetPasswordToken clear_expired$get_password_reset_token_expiry_timeget_password_reset_lookup_field)EmailSerializerPasswordTokenSerializerResetTokenSerializer)reset_password_token_createdpre_password_resetpost_password_reset) ResetPasswordValidateTokenResetPasswordConfirmResetPasswordRequestTokenreset_password_validate_tokenreset_password_confirmreset_password_request_token!ResetPasswordValidateTokenViewSetResetPasswordConfirmViewSet ResetPasswordRequestTokenViewSetZ0DJANGO_REST_PASSWORDRESET_HTTP_USER_AGENT_HEADERZHTTP_USER_AGENTZ+DJANGO_REST_PASSWORDRESET_IP_ADDRESS_HEADERZ REMOTE_ADDRcCs(td|}td|}||kS)z Perform case-insensitive comparison of two identifiers, using the recommended algorithm from Unicode Technical Report 36, section 2.11.2(B)(2). NFKC) unicodedata normalizecasefold)s1s2Z normalized1Z normalized2r'W/var/www/html/Ranjet/env/lib/python3.9/site-packages/django_rest_passwordreset/views.py_unicode_ci_compare&s  r)c@s$eZdZdZdZdZeZddZdS)rzM An Api View which provides a method to verify that a token is valid r'cOs&|j|jd}|jddtddiS)NdataTZraise_exceptionstatusOK)serializer_classr+is_validr )selfrequestargskwargs serializerr'r'r(post:s zResetPasswordValidateToken.postN) __name__ __module__ __qualname____doc__throttle_classespermission_classesrr/r6r'r'r'r(r2s rc@s$eZdZdZdZdZeZddZdS)rzY An Api View which provides a method to reset a password based on a unique token r'c Os|j|jd}|jdd|jd}|jd}tjj|d}|j rt j |j |jdzt ||jttjdWn4ty}ztd|jiWYd}~n d}~00|j||jtj |j |jdtjj|jd td d iS) Nr*Tr,passwordtoken)key)senderuser)rAZpassword_validators)rAr-r.)r/r+r0validated_datarobjectsfilterfirstrAeligible_for_resetrsend __class__rrrZAUTH_PASSWORD_VALIDATORSrr messages set_passwordsaverdeleter ) r1r2r3r4r5r=r>reset_password_tokener'r'r(r6Hs,       zResetPasswordConfirm.postN) r7r8r9r:r;r<rr/r6r'r'r'r(r@s rc@s$eZdZdZdZdZeZddZdS)rz An Api View which provides a method to request a password reset token based on an e-mail address Sends a signal reset_password_token_created when a reset token was created r'c Os2|j|jd}|jdd|jd}t}tt|d}t|t j j fid t |i}d} |D]} | rjd} qqj| sttddstdtd gi|D]|} | rt|t| t rd} | jd kr| jd } n&tj j| |jtd |jtd d } tj|j || d qt!ddiS)Nr*Tr,email)hoursz {}__iexactFZ0DJANGO_REST_PASSWORDRESET_NO_INFORMATION_LEAKAGEz^We couldn't find an account associated with that email. Please try a different e-mail address.r)rA user_agent ip_address)r@instancerMr-r.)"r/r+r0rBrrnowrrUserrCrDformatrrFgetattrrr r_r)Zpassword_reset_tokensallcountrcreateZMETAgetHTTP_USER_AGENT_HEADERHTTP_IP_ADDRESS_HEADERrrGrHr ) r1r2r3r4r5rOZ$password_reset_token_validation_timeZnow_minus_expiry_timeZusersZactive_user_foundrAr>r'r'r(r6us@    zResetPasswordRequestToken.postN) r7r8r9r:r;r<rr/r6r'r'r'r(rks rcs eZdZdZfddZZS)rzP An Api ViewSet which provides a method to verify that a token is valid cstt|j|g|Ri|SN)superrr6r1r2r3r4rHr'r(r\sz(ResetPasswordValidateTokenViewSet.creater7r8r9r:r\ __classcell__r'r'rcr(rsrcs eZdZdZfddZZS)rz\ An Api ViewSet which provides a method to reset a password based on a unique token cstt|j|g|Ri|Sr`)rarr6rbrcr'r(r\sz"ResetPasswordConfirmViewSet.createrdr'r'rcr(rsrcs eZdZdZfddZZS)r z An Api ViewSet which provides a method to request a password reset token based on an e-mail address Sends a signal reset_password_token_created when a reset token was created cstt|j|g|Ri|Sr`)rar r6rbrcr'r(r\sz'ResetPasswordRequestTokenViewSet.createrdr'r'rcr(r sr )6r"datetimerZ django.confrZdjango.contrib.authrZ'django.contrib.auth.password_validationrrZdjango.core.exceptionsrZ django.utilsrZdjango.utils.translationr rYZrest_frameworkr Zrest_framework.genericsr Zrest_framework.responser Zrest_framework.viewsetsr Z django_rest_passwordreset.modelsrrrrZ%django_rest_passwordreset.serializersrrrZ!django_rest_passwordreset.signalsrrrrV__all__rXr^r_r)rrrrrr Zas_viewrrrr'r'r'r(s8             +G