h%RSSKrSSKrSSKrSSKJr SSKJr SSKJr SSK J r J r J r SSK JrJr SSKJrJr SSKJr SS KJr SS KJr \R2S 5rS rSS jrSSjrSSjrSSjr\"\\ 5r!"SS5r"Sr#"SS5r$"SS5r%"SS5r&g)N)SequenceMatcher)Path)settings)FieldDoesNotExistImproperlyConfiguredValidationError)cached_propertylazy) format_htmlformat_html_join) import_string)gettext)ngettextc4[[R5$N)get_password_validatorsrAUTH_PASSWORD_VALIDATORSf/var/www/html/tms-backend/venv/lib/python3.13/site-packages/django/contrib/auth/password_validation.pyget_default_password_validatorsrs "8#D#D EErc /nUH9n[US5nURU"S0UR S05D65 M; U$![a Sn[XBS-5ef=f)NNAMEzZThe module in NAME could not be imported: %s. Check your AUTH_PASSWORD_VALIDATORS setting.OPTIONSr)r ImportErrorrappendget)validator_config validators validatorklassmsgs rrrsJ%  @!)F"34E %?)-- 2">?@&  @4 'sv->'>? ?  @s AA!c/nUc [5nUHnURX5 M U(a [U5eg![anURU5 SnAMMSnAff=f)z Validate that the password meets all validator requirements. If the password is valid, return ``None``. If the password is invalid, raise ValidationError with all error messages. N)rvalidaterr)passworduserpassword_validatorserrorsr errors rvalidate_passwordr*)skF"=?(  !   x .) f%% ! MM%  !s> A$AA$c\Uc [5nUHn[USS5nU"X5 M g)zm Inform all validators that have implemented a password_changed() method that the password has been changed. Npassword_changedcgrr)as r"password_changed..DsTr)rgetattr)r%r&r'r r,s rr,r,<s5 "=?( "9.@/R()rct/nUc [5nUH"nURUR55 M$ U$)z? Return a list of all help texts of all configured validators. )rr get_help_text)r' help_textsr s rpassword_validators_help_textsr5Hs?J"=?( )1134) rcj[U5n[SSSU55nU(a [SU5$S$)zT Return an HTML string with all help texts of all configured validators in an
    . z
  • {}
    • c3$# UHo4v M g7frr).0 help_texts r 6_password_validators_help_text_html..[sE*YL*sz
      {}
    )r5r r )r'r4 help_itemss r#_password_validators_help_text_htmlr>Ts= 00CDJ! ME*EJ6@;}j 1GRGrc8\rSrSrSrS SjrS SjrSrSrSr g) MinimumLengthValidatorcz4 Validate that the password is of a minimum length. cXlgr min_length)selfrDs r__init__MinimumLengthValidator.__init__hs$rNc[U5UR:a%[UR5SSUR0S9eg)Npassword_too_shortrDcodeparams)lenrDrget_error_messagerEr%r&s rr$MinimumLengthValidator.validateks? x=4?? *!&&()$doo6  +rcJ[SSUR5UR-$)NzBThis password is too short. It must contain at least %d character.zCThis password is too short. It must contain at least %d characters.rrDrEs rrN(MinimumLengthValidator.get_error_messagess* TU  oo   rcN[SSUR5SUR0-$)Nz=Your password must contain at least %(min_length)d character.z>Your password must contain at least %(min_length)d characters.rDrRrSs rr3$MinimumLengthValidator.get_help_text}s/ K L OO 4?? + , ,rrC)r) __name__ __module__ __qualname____firstlineno____doc__rFr$rNr3__static_attributes__rrrr@r@cs% ,rr@cd[U5nUS- U-n[U5nUSU-:=(a XT:$)ay Test that value is within a reasonable range of password. The following ratio calculations are based on testing SequenceMatcher like this: for i in range(0,6): print(10**i, SequenceMatcher(a='A', b='A'*(10**i)).quick_ratio()) which yields: 1 1.0 10 0.18181818181818182 100 0.019801980198019802 1000 0.001998001998001998 10000 0.00019998000199980003 100000 1.999980000199998e-05 This means a length_ratio of 10 should never yield a similarity higher than 0.2, for 100 this is down to 0.02 and for 1000 it is 0.002. This can be calculated via 2 / length_ratio. As a result we avoid the potentially expensive sequence matching.  )rM)r%max_similarityvaluepwd_lenlength_bound_similarity value_lens rexceeds_maximum_length_ratiorfs=0(mG,q07:E I b9n $ L)LLrc@\rSrSrSrSr\S4SjrS SjrSrS r S r g) UserAttributeSimilarityValidatora Validate that the password is sufficiently different from the user's attributes. If no specific attributes are provided, look at a sensible list of defaults. Attributes that don't exist are ignored. Comparison is made to not only the full attribute value, but also its components, so that, for example, a password is validated against either part of an email address, as well as the full address. )username first_name last_nameemailgffffff?c>XlUS:a [S5eX lg)Ng?z#max_similarity must be at least 0.1)user_attributes ValueErrorra)rEroras rrF)UserAttributeSimilarityValidator.__init__s". C BC C,rNcRU(dgUR5nURHn[X#S5nU(a[U[5(dM-UR5n[ R "SU5U/-nUHn[XRU5(aM [XS9R5UR:dMG[ URRU5R5n[UR!5SSU0S9e M g![a UnN0f=f)Nz\W+)r.bpassword_too_similar verbose_namerJ)lowerror1 isinstancestrresplitrfrar quick_ratio_meta get_fieldrurrrN) rEr%r&attribute_namerb value_lower value_parts value_partrus rr$)UserAttributeSimilarityValidator.validates  >>#"22ND$7E 5# 6 6++-K((6;7;-GK) /11:#h=IIK**+6'* JJ00@MM( *..03 . =* 3&-6'5 6s.D D&%D&c[S5$)Nz4The password is too similar to the %(verbose_name)s._rSs rrN2UserAttributeSimilarityValidator.get_error_messagesGHHrc[S5$)NuHYour password can’t be too similar to your other personal information.rrSs rr3.UserAttributeSimilarityValidator.get_help_texts V  r)raror) rXrYrZr[r\DEFAULT_USER_ATTRIBUTESrFr$rNr3r]rrrrhrhs+ O'>s- @I rrhcJ\rSrSrSr\S5r\4SjrS SjrSr Sr S r g) CommonPasswordValidatora Validate that the password is not a common password. The password is rejected if it occurs in a provided list of passwords, which may be gzipped. The list Django ships with contains 20000 common passwords (unhexed, lowercased and deduplicated), created by Royce Williams: https://gist.github.com/roycewilliams/226886fd01572964e1431ac8afc999ce The password list must be lowercased to match the comparison in validate(). cV[[5R5RS- $)Nzcommon-passwords.txt.gz)r__file__resolveparentrSs rDEFAULT_PASSWORD_LIST_PATH2CommonPasswordValidator.DEFAULT_PASSWORD_LIST_PATHs!H~%%'..1JJJrcU[RLa URn[R"USSS9nUVs1sHo3R 5iM snUlSSS5 gs snf!,(df  g=f![ aS [U5nUVs1sHo3R 5iM Os snfsnUlSSS5 g!,(df  g=ff=f)Nrtzutf-8)encoding)rrgzipopenstrip passwordsOSError)rEpassword_list_pathfxs rrF CommonPasswordValidator.__init__s !8!S!S S!%!@!@  8-tgF!56!7Q'')Q!7GF!7GF 8()Q56!7Q'')Q!7*))) 8scA;A*A%A*A;%A** A84A;8A;;CCB.-C;C C CCNcUR5R5UR;a[UR 5SS9eg)Npassword_too_commonrK)rvrrrrNrOs rr$ CommonPasswordValidator.validates? >>  ! ! #t~~ 5!&&(*  6rc[S5$)NzThis password is too common.rrSs rrN)CommonPasswordValidator.get_error_messages/00rc[S5$)Nu2Your password can’t be a commonly used password.rrSs rr3%CommonPasswordValidator.get_help_textsEFFr)rr) rXrYrZr[r\r rrFr$rNr3r]rrrrrs8KK+E81Grrc.\rSrSrSrSSjrSrSrSrg) NumericPasswordValidatoriz5 Validate that the password is not entirely numeric. Nc^UR5(a[UR5SS9eg)Npassword_entirely_numericr)isdigitrrNrOs rr$!NumericPasswordValidator.validate s2     !&&(0  rc[S5$)Nz"This password is entirely numeric.rrSs rrN*NumericPasswordValidator.get_error_messages566rc[S5$)Nu*Your password can’t be entirely numeric.rrSs rr3&NumericPasswordValidator.get_help_texts=>>rrr) rXrYrZr[r\r$rNr3r]rrrrrs7?rr)NNr)' functoolsrrydifflibrpathlibr django.confrdjango.core.exceptionsrrrdjango.utils.functionalr r django.utils.htmlr r django.utils.module_loadingr django.utils.translationrrrcacherrr*r,r5r>rx"password_validators_help_text_htmlr@rfrhrrrrrrs #  :;51- FF  && )  H&**Ms%S",,DM<: : z$G$GN??r