U
eD @ s d dl Z d dlmZ d dlmZmZmZ d dlmZm Z d dl
m Z d dl m
Z
d dlmZ d dlmZ d d lmZ d d
lmZ d d lmZ d d lmZ d d
lmZ d dl m Z d dl m Z e Z dd Z!G dd dej"Z#G dd dej$Z%G dd dej&Z'G dd dej(Z)G dd de)Z*G d d d ej(Z+G d d d ej,Z-G d d! d!ej,Z.G d"d# d#ej,Z/G d$d% d%e/Z0G d&d' d'ej,Z1dS )( N)forms) authenticateget_user_modelpassword_validation)UNUSABLE_PASSWORD_PREFIXidentify_hasher)User)default_token_generator)get_current_site)ValidationError)EmailMultiAlternatives)loader) force_bytes)urlsafe_base64_encode)capfirst)gettext) gettext_lazyc C s t d| t d| kS )z
Perform case-insensitive comparison of two identifiers, using the
recommended algorithm from Unicode Technical Report 36, section
2.11.2(B)(2).
NFKC) unicodedata normalizecasefold)s1s2 r =/tmp/pip-unpacked-wheel-lctamlir/django/contrib/auth/forms.py_unicode_ci_compare s r c s, e Zd ZdZdZ fddZdd Z ZS )ReadOnlyPasswordHashWidgetz)auth/widgets/read_only_password_hash.htmlTc s t |||}g }|r"|tr6|dtdi n`z t|}W n& tk
rh |dtdi Y n.X || D ] \}}|t||d qx||d< |S )NlabelzNo password set.z5Invalid password format or unknown hashing algorithm.)r valuesummary)
super get_context
startswithr appendr r
ValueErrorZ safe_summaryitems) selfnamer attrscontextr ZhasherkeyZvalue_ __class__r r r! % s$
z&ReadOnlyPasswordHashWidget.get_contextc C s d S Nr )r& Zid_r r r id_for_label; s z'ReadOnlyPasswordHashWidget.id_for_label)__name__
__module__ __qualname__Z
template_nameZ read_onlyr! r.
__classcell__r r r+ r r ! s r c s e Zd ZeZ fddZ ZS )ReadOnlyPasswordHashFieldc s* | dd | dd t j|| d S )NrequiredFdisabledT)
setdefaultr __init__r& argskwargsr+ r r r7 B s z"ReadOnlyPasswordHashField.__init__)r/ r0 r1 r widgetr7 r2 r r r+ r r3 ? s r3 c s( e Zd Z fddZ fddZ ZS )
UsernameFieldc s4 t |}| jd k r(t|| jkr(|S td|S )Nr )r to_python
max_lengthlenr r )r& r r+ r r r= I s zUsernameField.to_pythonc s t |dddS )Nnoneusername)Zautocapitalize autocomplete)r widget_attrs)r& r; r+ r r rC T s
zUsernameField.widget_attrs)r/ r0 r1 r= rC r2 r r r+ r r< H s r< c s e Zd ZdZdediZejeddejddide
d Z ejed
ejddidded d Z G d
d dZ
fddZdd Z fddZd fdd Z ZS )BaseUserCreationFormzc
A form that creates a user, with no privileges, from the given username and
password.
password_mismatch' The two password fields didn’t match.PasswordFrB new-passwordr( )r stripr; help_textzPassword confirmation4Enter the same password as before, for verification.r r; rJ rK c @ s e Zd ZeZdZdeiZdS )zBaseUserCreationForm.Meta)rA rA Nr/ r0 r1 r modelfieldsr< Z
field_classesr r r r Metar s rQ c s: t j|| | jjj| jkr6d| j| jjj jjd< d S )NT autofocus)r r7 _metarO USERNAME_FIELDrP r; r( r8 r+ r r r7 w s z BaseUserCreationForm.__init__c C s> | j d}| j d}|r:|r:||kr:t| jd dd|S N password1 password2rE code) cleaned_datagetr error_messagesr& rV rW r r r clean_password2~ s z$BaseUserCreationForm.clean_password2c
s` t | jd}|r\zt|| j W n. tk
rZ } z| d| W 5 d }~X Y nX d S )NrW ) r _post_cleanrZ r[ r validate_passwordinstancer Z add_error)r& passworderrorr+ r r r_ s
z BaseUserCreationForm._post_cleanTc s@ t jdd}|| jd |r<| t| dr<| |S )NF)commitrV save_m2m)r save set_passwordrZ hasattrre )r& rd userr+ r r rf s
zBaseUserCreationForm.save)T)r/ r0 r1 __doc___r\ r CharField
PasswordInputr "password_validators_help_text_htmlrV rW rQ r7 r^ r_ rf r2 r r r+ r rD \ s*
rD c @ s e Zd Zdd ZdS )UserCreationFormc C sR | j d}|rJ| jjjj|d rJ| td| j
| jjdgi n|S dS )z*Reject usernames that differ only in case.rA )Zusername__iexactN) rZ r[ rS rO ZobjectsfilterexistsZ_update_errorsr ra Zunique_error_message)r& rA r r r clean_username s
z UserCreationForm.clean_usernameN)r/ r0 r1 rr r r r r ro s ro c s> e Zd ZeededdZG dd dZ fddZ ZS )UserChangeFormrG u Raw passwords are not stored, so there is no way to see this user’s password, but you can change the password using this form.)r rK c @ s e Zd ZeZdZdeiZdS )zUserChangeForm.Meta__all__rA NrN r r r r rQ s rQ c sZ t j|| | jd}|r8|jd| jj d|_| jd}|rV|j d|_d S )Nrb z../../z
/password/user_permissions content_type)
r r7 rP r[ rK formatra pkZquerysetZselect_related)r& r9 r: rb ru r+ r r r7 s zUserChangeForm.__init__) r/ r0 r1 r3 rk rb rQ r7 r2 r r r+ r rs s rs c s e Zd ZdZeejddiddZeje ddej
dd idd
Z e d e d d
Z d fdd Z
dd Zdd Zdd Zdd Z ZS )AuthenticationFormzs
Base class for authenticating users. Extend this to get a form that accepts
username/password logins.
rR TrI )r; rG FrB current-passwordr rJ r; z^Please enter a correct %(username)s and password. Note that both fields may be case-sensitive.zThis account is inactive.)
invalid_logininactiveNc s| || _ d| _t j|| tjtj| _| jj p4d}|| j
d _ || j
d j j d< | j
d j
dkrxt| jj| j
d _
dS )z
The 'request' parameter is set for custom auth use by subclasses.
The form data comes in via the standard 'data' kwarg.
N rA Z maxlength)request
user_cacher r7 UserModelrS get_fieldrT username_fieldr> rP r; r( r r verbose_name)r& r r9 r: Zusername_max_lengthr+ r r r7 s zAuthenticationForm.__init__c C s\ | j d}| j d}|d k rV|rVt| j||d| _| jd krJ| n | | j | j S )NrA rb )rA rb )rZ r[ r r r get_invalid_login_errorconfirm_login_allowed)r& rA rb r r r clean s
zAuthenticationForm.cleanc C s |j st| jd dddS )a
Controls whether the given User may log in. This is a policy setting,
independent of end-user authentication. This default behavior is to
allow login by active users, and reject login by inactive users.
If the given user cannot log in, this method should raise a
``ValidationError``.
If the given user may log in, this method should return None.
r} rX N) is_activer r\ )r& ri r r r r s
z(AuthenticationForm.confirm_login_allowedc C s | j S r- )r r& r r r get_user s zAuthenticationForm.get_userc C s t | jd dd| jjidS )Nr| rA )rY params)r r\ r r r r r r r s
z*AuthenticationForm.get_invalid_login_error)N)r/ r0 r1 rj r< r Z TextInputrA rl rk rm rb r\ r7 r r r r r2 r r r+ r ry s" ry c @ sZ e Zd ZejeddejddiddZddd Zd
d Z dd d
de
ddddf ddZ dS )PasswordResetFormZEmailr~ rB emailrI )r r> r; Nc C sb t ||}d| }t ||}t||||g} |dk rVt ||}
| |
d | dS )zO
Send a django.core.mail.EmailMultiAlternatives to `to_email`.
Nz text/html)r
Zrender_to_stringjoin
splitlinesr Zattach_alternativesend) r& subject_template_nameemail_template_namer)
from_emailZto_emailhtml_email_template_namesubjectbodyZ
email_messageZ
html_emailr r r send_mail' s zPasswordResetForm.send_mailc s6 t t jjf d ddi} fdd|D S )a Given an email, return matching user(s) who should receive a reset.
This allows subclasses to more easily customize the default policies
that prevent inactive users and users with unusable passwords from
resetting their password.
z
%s__iexactr Tc 3 s* | ]"}| rt t|r|V qd S r- )Zhas_usable_passwordr getattr).0ur email_field_namer r M s z.PasswordResetForm.get_users..)r get_email_field_nameZ_default_managerrp )r& r Z active_usersr r r get_users? s zPasswordResetForm.get_usersz'registration/password_reset_subject.txtz®istration/password_reset_email.htmlFc
C s | j d }
|s$t|} | j} | j}
n| } }
t }| |
D ]X}t||}||
| tt |j
|| ||rpdndd| p|i }| j ||||||d q>dS )zf
Generate a one-use only link for resetting password and send it to the
user.
r httpshttp)r domain site_nameuidri tokenprotocol)r N)
rZ r
r' r r r r r r r rx Z
make_tokenr )r& Zdomain_overrider r Z use_httpsZtoken_generatorr r r Zextra_email_contextr Z current_siter r r ri Z
user_emailr) r r r rf T s6
zPasswordResetForm.save)N) r/ r0 r1 r Z
EmailFieldrk Z
EmailInputr r r r rf r r r r r s$
r c s e Zd ZdZdediZejedejddidde
d Z ejed
dejddidd Z fd d
Z
dd ZdddZ ZS )SetPasswordFormzZ
A form that lets a user set their password without entering the old
password
rE rF z New passwordrB rH rI FrM zNew password confirmationr{ c s || _ t j|| d S r- ri r r7 r& ri r9 r: r+ r r r7 s zSetPasswordForm.__init__c C sL | j d}| j d}|r:|r:||kr:t| jd ddt|| j |S )N
new_password1
new_password2rE rX rZ r[ r r\ r r` ri r] r r r clean_new_password2 s z#SetPasswordForm.clean_new_password2Tc C s* | j d }| j| |r$| j | jS )Nr rZ ri rg rf r& rd rb r r r rf s
zSetPasswordForm.save)T)r/ r0 r1 rj rk r\ r rl rm r rn r r r7 r rf r2 r r r+ r r s$ r c @ sV e Zd ZdZejdediZejeddej dddd d
Z
d d d
gZ dd Z dS )PasswordChangeFormz[
A form that lets a user change their password by entering their old
password.
password_incorrectzAYour old password was entered incorrectly. Please enter it again.z Old passwordFrz TrB rR rI r{ old_passwordr r c C s, | j d }| j|s(t| jd dd|S )zB
Validate that the old_password field is correct.
r r rX )rZ ri Zcheck_passwordr r\ )r& r r r r clean_old_password s
z%PasswordChangeForm.clean_old_passwordN)
r/ r0 r1 rj r r\ rk r rl rm r Z field_orderr r r r r r s
r c s e Zd ZdZdediZdZejedej dddd d
e
d Z ejed ej d
did d
edd Z
fddZdd ZdddZe fddZ ZS )AdminPasswordChangeFormzN
A form used to change the password of a user in the admin interface.
rE rF r4 rG rH Tr rI FrM zPassword (again)rB rL c s || _ t j|| d S r- r r r+ r r r7 s z AdminPasswordChangeForm.__init__c C sL | j d}| j d}|r:|r:||kr:t| jd ddt|| j |S rU r r] r r r r^ s z'AdminPasswordChangeForm.clean_password2c C s* | j d }| j| |r$| j | jS )zSave the new password.rV r r r r r rf s
z AdminPasswordChangeForm.savec s* t j}| jD ]}||krg S qdgS )Nrb )r changed_datarP )r& datar' r+ r r r s
z$AdminPasswordChangeForm.changed_data)T)r/ r0 r1 rj rk r\ Zrequired_css_classr rl rm r rn rV rW r7 r^ rf propertyr r2 r r r+ r r s0
r )2r Zdjangor Zdjango.contrib.authr r r Zdjango.contrib.auth.hashersr r Zdjango.contrib.auth.modelsr Zdjango.contrib.auth.tokensr Z django.contrib.sites.shortcutsr
Zdjango.core.exceptionsr Zdjango.core.mailr Zdjango.templater
Zdjango.utils.encodingr Zdjango.utils.httpr Zdjango.utils.textr Zdjango.utils.translationr r rk r r ZWidgetr ZFieldr3 rl r< Z ModelFormrD ro rs ZFormry r r r r r r r r s6 A Qb,#