hL6ddlZddlZddlZddlZddlmZmZddlmZddlm Z ddl m Z ddl m Z ddlmZddlmZmZmZdd lmZdd lmZdd lmZej4ej6zZGd d eZGddeZGddZ y)N)datetime timedelta)settings)SuspiciousSession)signing)SuspiciousOperation)timezone)constant_time_compareget_random_string salted_hmac)RemovedInDjango40Warning) import_string)LANGUAGE_SESSION_KEYceZdZdZy) CreateErrorz Used internally as a consistent exception type to catch from save (see the docstring for SessionBase.save() for details). N__name__ __module__ __qualname____doc__h/var/www/html/ranktracker/api/venv/lib/python3.12/site-packages/django/contrib/sessions/backends/base.pyrrs  rrceZdZdZy) UpdateErrorzF Occurs if Django tries to update a session that was deleted. Nrrrrrr s  rrc|eZdZdZdZdZeZd0dZdZ dZ dZ d Z e d Zd0d Zefd Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"dZ#d Z$d!Z%e e$Z&e e$e%Z'd1d"Z(e e(Z)d#Z*d$Z+d%Z,d&Z-d'Z.d(Z/d)Z0d*Z1d+Z2d1d,Z3d0d-Z4d.Z5e6d/Z7y)2 SessionBasez- Base class for all Session classes. testcookieworkedNcj||_d|_d|_ttj |_y)NF) _session_keyaccessedmodifiedrrSESSION_SERIALIZER serializerself session_keys r__init__zSessionBase.__init__0s*'  '(C(CDrc||jvSN_sessionr'keys r __contains__zSessionBase.__contains__6dmm##rcj|tk(rtjdtd|j|S)NzThe user language will no longer be stored in request.session in Django 4.0. Read it from request.COOKIES[settings.LANGUAGE_COOKIE_NAME] instead.) stacklevel)rwarningswarnr r-r.s r __getitem__zSessionBase.__getitem__9s5 & & MMJ)Q   }}S!!rc0||j|<d|_yNTr-r#r'r/values r __setitem__zSessionBase.__setitem__Cs" c rc,|j|=d|_yr9r:r.s r __delitem__zSessionBase.__delitem__Gs MM#  rc4d|jjzS)Nzdjango.contrib.sessions.) __class__rr's rkey_saltzSessionBase.key_saltKs)DNN,G,GGGrc:|jj||Sr+)r-get)r'r/defaults rrEzSessionBase.getOs}}  g..rc|jxs||jv|_||jurdn|f}|jj|g|S)Nr)r#r-_SessionBase__not_givenpop)r'r/rFargss rrIzSessionBase.popRsM = )=  0 00rwj t}}  ,t,,rcl||jvr|j|Sd|_||j|<|Sr9r:r;s r setdefaultzSessionBase.setdefaultWs7 $-- ==% % DM!&DMM# Lrc6|j||j<yr+)TEST_COOKIE_VALUETEST_COOKIE_NAMErBs rset_test_cookiezSessionBase.set_test_cookie_s&*&<&<T " "#rcR|j|j|jk(Sr+)rErOrNrBs rtest_cookie_workedzSessionBase.test_cookie_workedbs"xx--.$2H2HHHrc||j=yr+)rOrBs rdelete_test_cookiezSessionBase.delete_test_cookiees && 'rchd|jjz}t||jS)Nzdjango.contrib.sessions)rArr hexdigest)r'r<rCs r_hashzSessionBase._hashhs,,t~~/F/FF8U+5577rctjdk(r|j|Stj||j |j dS)zGReturn the given session dictionary serialized and encoded as a string.sha1T)saltr%compress)rDEFAULT_HASHING_ALGORITHM_legacy_encoderdumpsrCr%)r' session_dicts rencodezSessionBase.encodemsF  - - 7&&|4 4}} t}}  rcZ tj||j|jS#tj$rN |j |cYS#t $r-tjd}|jdicYcYSwxYwt $r|j |cYSwxYw)N)rZr%z!django.security.SuspiciousSessionSession data corrupted) rloadsrCr% BadSignature_legacy_decode Exceptionlogging getLoggerwarning)r' session_dataloggers rdecodezSessionBase.decodews 5==DMMdoo^ ^##  **<88  **+NO78   5&&|4 4 5s3+.B*AB*1B B* B  B*)B*c|jj|}|j|}tj|j dz|zj dS)N:ascii)r%r^rWbase64 b64encoder`rl)r'r_ serializedhashs rr]zSessionBase._legacy_encodesS__&,,\: zz*%  4z ABII'RRrctj|jd} |jdd\}}|j |}t |j |s td|jj|S#t$rb}t|trFtjd|jj z}|j#t%|icYd}~Sd}~wwxYw)Nrornrbzdjango.security.%s)rp b64decoder`splitrWr rlrr%rcrf isinstancerrgrhrArristr)r'rj encoded_datarsrr expected_hasherks rrezSessionBase._legacy_decodes'' (;(;G(DE  +11$: D* JJz2M( F'(@AA(..z:: !01 **+?!++BVBV+VWs1v&I  sA)B C;AC60C;6C;cH|jj|d|_yr9)r-updater#)r'dict_s rr~zSessionBase.updates U# rc||jvSr+r,r.s rhas_keyzSessionBase.has_keyr1rc6|jjSr+)r-keysrBs rrzSessionBase.keyss}}!!##rc6|jjSr+)r-valuesrBs rrzSessionBase.valuess}}##%%rc6|jjSr+)r-itemsrBs rrzSessionBase.itemss}}""$$rc.i|_d|_d|_yr9)_session_cacher"r#rBs rclearzSessionBase.clears!  rcZ |j xr |j S#t$rYywxYw)zBReturn True when there is no session_key and the session is empty.T)r!rAttributeErrorrBs ris_emptyzSessionBase.is_emptys6 (((D1D1D-D D  s  **cL tdt}|j|s|S$)z)Return session key that isn't being used. )r VALID_KEY_CHARSexistsr&s r_get_new_session_keyz SessionBase._get_new_session_keys(+B@K;;{+""rc\|j|j|_|jSr+)r!rrBs r_get_or_create_session_keyz&SessionBase._get_or_create_session_keys+    $ $ 9 9 ;D    rc&|xrt|dk\S)z Key must be truthy and at least 8 characters long. 8 characters is an arbitrary lower bound for some minimal key security. )lenr.s r_validate_session_keyz!SessionBase._validate_session_keys $s3x1}$rc|jSr+)_SessionBase__session_keyrBs r_get_session_keyzSessionBase._get_session_keys!!!rcD|j|r||_yd|_y)zV Validate session key on assignment. Invalid values will set to None. N)rrr'r<s r_set_session_keyzSessionBase._set_session_keys"  % %e ,!&D !%D rcd|_ |jS#t$r9|j|ri|_n|j |_Y|jSwxYw)z Lazily load session from storage (unless "no_load" is True, when only an empty dict is stored) and store it in the current instance. T)r"rrr(load)r'no_loads r _get_sessionzSessionBase._get_sessions\   2&& & 2'7&(#&*iik#"""  2s 4AAc"tjSr+)rSESSION_COOKIE_AGErBs rget_session_cookie_agez"SessionBase.get_session_cookie_ages***rc * |d} |d}|s|j St |t s|S||z }|jdz|jzS#t$rtj}YjwxYw#t$r|jd}YwxYw)zGet the number of seconds until the session expires. Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. modificationexpiry_session_expiryiQ) KeyErrorr nowrErrxrdaysseconds)r'kwargsrrdeltas rget_expiry_agezSessionBase.get_expiry_ages  *!.1L  1H%F..0 0&(+M%zzE!EMM11 *#<<>L * 1XX/0F 1s"AA5A21A25BBc  |d} |d}t |t r|S|xs|j }|t|zS#t$rtj}YZwxYw#t$r|jd}YtwxYw)zGet session the expiry date (as a datetime object). Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. rrr)r)rr rrErxrrr)r'rrrs rget_expiry_datezSessionBase.get_expiry_dates  *!.1L 1H%F fh 'M84668i777 *#<<>L *  1XX/0F 1s"AA%A"!A"%BBc| |d=yt|trtj|z}||d<y#t$rYywxYw)a* Set a custom expiration for the session. ``value`` can be an integer, a Python ``datetime`` or ``timedelta`` object or ``None``. If ``value`` is an integer, the session will expire after that many seconds of inactivity. If set to ``0`` then the session will expire on browser close. If ``value`` is a ``datetime`` or ``timedelta`` object, the session will expire at that specific future time. If ``value`` is ``None``, the session uses the global session expiry policy. Nr)rrxrr rrs r set_expiryzSessionBase.set_expiry$sX = *+  eY 'LLNU*E"'     s5 AAcl|jdtjS|jddk(S)a Return ``True`` if the session is set to expire when the browser closes, and ``False`` if there's an expiry date. Use ``get_expiry_date()`` or ``get_expiry_age()`` to find the actual expiry date/age, if there is one. rr)rErSESSION_EXPIRE_AT_BROWSER_CLOSErBs rget_expire_at_browser_closez'SessionBase.get_expire_at_browser_close>s5 88% & .;; ;xx)*a//rcR|j|jd|_y)zc Remove the current session data from the database and regenerate the key. N)rdeleter!rBs rflushzSessionBase.flushIs   rc|j}|j}|j||_|r|j |yy)zU Create a new session key, while retaining the current session data. N)r-r(createrr)r'datar/s r cycle_keyzSessionBase.cycle_keyRs=}} "  KK  rctd)zF Return True if the given session_key already exists. z9subclasses of SessionBase must provide an exists() methodNotImplementedErrorr&s rrzSessionBase.exists_s""]^^rctd)z Create a new session instance. Guaranteed to create a new object with a unique key and will have saved the result once (with empty data) before the method returns. z8subclasses of SessionBase must provide a create() methodrrBs rrzSessionBase.createes ""\]]rctd)z Save the session data. If 'must_create' is True, create a new session object (or raise CreateError). Otherwise, only update an existing object and don't create one (raise UpdateError if needed). z6subclasses of SessionBase must provide a save() methodr)r' must_creates rsavezSessionBase.savems ""Z[[rctd)zx Delete the session data under this key. If the key is None, use the current session key value. z8subclasses of SessionBase must provide a delete() methodrr&s rrzSessionBase.deleteus ""\]]rctd)z@ Load the session data and return a dictionary. z6subclasses of SessionBase must provide a load() methodrrBs rrzSessionBase.load|s""Z[[rctd)a Remove expired sessions from the session store. If this operation isn't possible on a given backend, it should raise NotImplementedError. If it isn't necessary, because the backend has a built-in expiration mechanism, it should be a no-op. z.This backend does not support clear_expired().r)clss r clear_expiredzSessionBase.clear_expireds""RSSrr+)F)8rrrrrOrNobjectrHr)r0r7r=r?propertyrCrErIrLrPrRrTrWr`rlr]rer~rrrrrrrrrrrr(r!rr-rrrrrrrrrrrr classmethodrrrrrr'sI$ (KE $"HH/ +- =I(8  5"S &$$&%#! %"&+,K,.>?L # %H+228*(4 0! _ ^\^\ TTrr)!rprgstringr5rr django.confr"django.contrib.sessions.exceptionsr django.corerdjango.core.exceptionsr django.utilsr django.utils.cryptor r r django.utils.deprecationr django.utils.module_loadingrdjango.utils.translationrascii_lowercasedigitsrrfrrrrrrrst  ( @6!>59((6==8 )  ) dTdTr