o uvXjo.ã@s¶ddlZddlZddlZddlmZmZddlmZddlmZddl m Z ddl m Z ddl mZmZmZddlmZejejZGd d „d eƒZGd d „d eƒZGd d„dƒZdS)éN)ÚdatetimeÚ timedelta)Úsettings)ÚSuspiciousSession)ÚSuspiciousOperation)Útimezone)Úconstant_time_compareÚget_random_stringÚ salted_hmac)Ú import_stringc@óeZdZdZdS)Ú CreateErrorz‡ Used internally as a consistent exception type to catch from save (see the docstring for SessionBase.save() for details). N©Ú__name__Ú __module__Ú __qualname__Ú__doc__©rrúb/var/www/html/myproject/venv/lib/python3.10/site-packages/django/contrib/sessions/backends/base.pyr sr c@r )Ú UpdateErrorzF Occurs if Django tries to update a session that was deleted. Nrrrrrrsrc@s‚eZdZdZdZdZeƒZdTdd„Zdd„Z d d „Z d d „Z d d„Z dTdd„Z efdd„Zdd„Zdd„Zdd„Zdd„Zdd„Zdd„Zdd „Zd!d"„Zd#d$„Zd%d&„Zd'd(„Zd)d*„Zd+d,„Zd-d.„Zd/d0„Zd1d2„Zd3d4„Zd5d6„Z d7d8„Z!e"e ƒZ#e"e e!ƒZ$dUd:d;„Z%e"e%ƒZ&dd?„Z(d@dA„Z)dBdC„Z*dDdE„Z+dFdG„Z,dHdI„Z-dJdK„Z.dUdLdM„Z/dTdNdO„Z0dPdQ„Z1e2dRdS„ƒZ3dS)VÚ SessionBasez- Base class for all Session classes. Ú testcookieÚworkedNcCs"||_d|_d|_ttjƒ|_dS)NF)Ú _session_keyÚaccessedÚmodifiedr rÚSESSION_SERIALIZERÚ serializer©ÚselfÚ session_keyrrrÚ__init__,szSessionBase.__init__cCó ||jvS©N©Ú_session©rÚkeyrrrÚ __contains__2ó zSessionBase.__contains__cCs |j|Sr#r$r&rrrÚ __getitem__5r)zSessionBase.__getitem__cCs||j|<d|_dS©NT©r%r©rr'ÚvaluerrrÚ __setitem__8s  zSessionBase.__setitem__cCs|j|=d|_dSr+r,r&rrrÚ __delitem__<s zSessionBase.__delitem__cCs|j ||¡Sr#)r%Úget)rr'Údefaultrrrr1@szSessionBase.getcCs:|jp||jv|_||jurdn|f}|jj|g|¢RŽS)Nr)rr%Ú_SessionBase__not_givenÚpop)rr'r2Úargsrrrr4CszSessionBase.popcCs(||jvr |j|Sd|_||j|<|Sr+r,r-rrrÚ setdefaultHs   zSessionBase.setdefaultcCs|j||j<dSr#)ÚTEST_COOKIE_VALUEÚTEST_COOKIE_NAME©rrrrÚset_test_cookiePszSessionBase.set_test_cookiecCs| |j¡|jkSr#)r1r8r7r9rrrÚtest_cookie_workedSszSessionBase.test_cookie_workedcCs ||j=dSr#)r8r9rrrÚdelete_test_cookieVs zSessionBase.delete_test_cookiecCsd|jj}t||ƒ ¡S)Nzdjango.contrib.sessions)Ú __class__rr Ú hexdigest)rr.Úkey_saltrrrÚ_hashYs zSessionBase._hashcCs4| ¡ |¡}| |¡}t | ¡d|¡ d¡S)zGReturn the given session dictionary serialized and encoded as a string.ó:Úascii)rÚdumpsr@Úbase64Ú b64encodeÚencodeÚdecode)rÚ session_dictÚ serializedÚhashrrrrF]s zSessionBase.encodec Cs¤t | d¡¡}z | dd¡\}}| |¡}t| ¡|ƒs!tdƒ‚| ¡  |¡WSt yQ}zt |t ƒrEt  d|jj¡}| t|ƒ¡iWYd}~Sd}~ww)NrBrAézSession data corruptedzdjango.security.%s)rDÚ b64decoderFÚsplitr@rrGrrÚloadsÚ ExceptionÚ isinstancerÚloggingÚ getLoggerr=rÚwarningÚstr)rÚ session_dataÚ encoded_datarJrIÚ expected_hashÚeÚloggerrrrrGcs  €úzSessionBase.decodecCs|j |¡d|_dSr+)r%Úupdater)rÚdict_rrrrZus  zSessionBase.updatecCr"r#r$r&rrrÚhas_keyyr)zSessionBase.has_keycCó |j ¡Sr#)r%Úkeysr9rrrr^|r)zSessionBase.keyscCr]r#)r%Úvaluesr9rrrr_r)zSessionBase.valuescCr]r#)r%Úitemsr9rrrr`‚r)zSessionBase.itemscCsi|_d|_d|_dSr+)Ú_session_cacherrr9rrrÚclear…s zSessionBase.clearcCs(z |j o|j WStyYdSw)zBReturn True when there is no session_key and the session is empty.T)rraÚAttributeErrorr9rrrÚis_emptys  ÿzSessionBase.is_emptycCs tdtƒ}| |¡s |Sq)z)Return session key that isn't being used.Té )r ÚVALID_KEY_CHARSÚexistsrrrrÚ_get_new_session_key”s   ýz SessionBase._get_new_session_keycCs|jdur | ¡|_|jSr#)rrhr9rrrÚ_get_or_create_session_key›s  z&SessionBase._get_or_create_session_keycCs|ot|ƒdkS)z” Key must be truthy and at least 8 characters long. 8 characters is an arbitrary lower bound for some minimal key security. é)Úlenr&rrrÚ_validate_session_key sz!SessionBase._validate_session_keycCs|jSr#)Ú_SessionBase__session_keyr9rrrÚ_get_session_key§szSessionBase._get_session_keycCs| |¡r ||_dSd|_dS)zV Validate session key on assignment. Invalid values will set to None. N)rlrm©rr.rrrÚ_set_session_keyªs   zSessionBase._set_session_keyFcCsLd|_z|jWSty%|jdus|ri|_Y|jS| ¡|_Y|jSw)zž Lazily load session from storage (unless "no_load" is True, when only an empty dict is stored) and store it in the current instance. TN)rrarcr Úload)rÚno_loadrrrÚ _get_session¶s  ÿûzSessionBase._get_sessioncKs‚z|d}Wn tyt ¡}Ynwz|d}Wnty(| d¡}Ynw|s.tjSt|tƒs5|S||}|jd|j S)zÕGet the number of seconds until the session expires. Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. Ú modificationÚexpiryÚ_session_expiryi€Q) ÚKeyErrorrÚnowr1rÚSESSION_COOKIE_AGErPrÚdaysÚseconds)rÚkwargsrtruÚdeltarrrÚget_expiry_ageÇs    ÿ  ÿ zSessionBase.get_expiry_agecKsxz|d}Wn tyt ¡}Ynwz|d}Wnty(| d¡}Ynwt|tƒr0|S|p4tj}|t|dS)zÔGet session the expiry date (as a datetime object). Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. rtrurv)r{) rwrrxr1rPrrryr)rr|rtrurrrÚget_expiry_dateàs   ÿ  ÿ  zSessionBase.get_expiry_datecCsL|durz|d=WdStyYdSwt|tƒr t ¡|}||d<dS)a* Set a custom expiration for the session. ``value`` can be an integer, a Python ``datetime`` or ``timedelta`` object or ``None``. If ``value`` is an integer, the session will expire after that many seconds of inactivity. If set to ``0`` then the session will expire on browser close. If ``value`` is a ``datetime`` or ``timedelta`` object, the session will expire at that specific future time. If ``value`` is ``None``, the session uses the global session expiry policy. Nrv)rwrPrrrxrorrrÚ set_expiryõs þþ   zSessionBase.set_expirycCs"| d¡dur tjS| d¡dkS)a Return ``True`` if the session is set to expire when the browser closes, and ``False`` if there's an expiry date. Use ``get_expiry_date()`` or ``get_expiry_age()`` to find the actual expiry date/age, if there is one. rvNr)r1rÚSESSION_EXPIRE_AT_BROWSER_CLOSEr9rrrÚget_expire_at_browser_closesz'SessionBase.get_expire_at_browser_closecCs| ¡| ¡d|_dS)zc Remove the current session data from the database and regenerate the key. N)rbÚdeleterr9rrrÚflushs zSessionBase.flushcCs0|j}|j}| ¡||_|r| |¡dSdS)zU Create a new session key, while retaining the current session data. N)r%r Úcreaterarƒ)rÚdatar'rrrÚ cycle_key#sÿzSessionBase.cycle_keycCótdƒ‚)zF Return True if the given session_key already exists. z9subclasses of SessionBase must provide an exists() method©ÚNotImplementedErrorrrrrrg0ózSessionBase.existscCrˆ)zÅ Create a new session instance. Guaranteed to create a new object with a unique key and will have saved the result once (with empty data) before the method returns. z8subclasses of SessionBase must provide a create() methodr‰r9rrrr…6ózSessionBase.createcCrˆ)zä Save the session data. If 'must_create' is True, create a new session object (or raise CreateError). Otherwise, only update an existing object and don't create one (raise UpdateError if needed). z6subclasses of SessionBase must provide a save() methodr‰)rÚ must_createrrrÚsave>rŒzSessionBase.savecCrˆ)zx Delete the session data under this key. If the key is None, use the current session key value. z8subclasses of SessionBase must provide a delete() methodr‰rrrrrƒFszSessionBase.deletecCrˆ)z@ Load the session data and return a dictionary. z6subclasses of SessionBase must provide a load() methodr‰r9rrrrqMr‹zSessionBase.loadcCrˆ)a Remove expired sessions from the session store. If this operation isn't possible on a given backend, it should raise NotImplementedError. If it isn't necessary, because the backend has a built-in expiration mechanism, it should be a no-op. z.This backend does not support clear_expired().r‰)ÚclsrrrÚ clear_expiredSs zSessionBase.clear_expiredr#)F)4rrrrr8r7Úobjectr3r!r(r*r/r0r1r4r6r:r;r<r@rFrGrZr\r^r_r`rbrdrhrirlrnrpÚpropertyr rrsr%r~rr€r‚r„r‡rgr…rŽrƒrqÚ classmethodrrrrrr#s`          r)rDrQÚstringrrÚ django.confrÚ"django.contrib.sessions.exceptionsrÚdjango.core.exceptionsrÚ django.utilsrÚdjango.utils.cryptorr r Údjango.utils.module_loadingr Úascii_lowercaseÚdigitsrfrOr rrrrrrÚs