U û‚ºeà-ã@sšddlZddlZddlmZmZddlmZddlmZddlm Z ddl m Z ddl m Z ejejZGdd „d eƒZGd d „d eƒZGd d „d ƒZdS)éN)ÚdatetimeÚ timedelta)Úsettings)Úsigning)Útimezone)Úget_random_string)Ú import_stringc@seZdZdZdS)Ú CreateErrorz‡ Used internally as a consistent exception type to catch from save (see the docstring for SessionBase.save() for details). N©Ú__name__Ú __module__Ú __qualname__Ú__doc__©rrúI/tmp/pip-unpacked-wheel-lctamlir/django/contrib/sessions/backends/base.pyr sr c@seZdZdZdS)Ú UpdateErrorzF Occurs if Django tries to update a session that was deleted. Nr rrrrrsrc@sŽeZdZdZdZdZeƒZdVdd„Zdd„Z d d „Z d d „Z d d„Z e dd„ƒZdWdd„Zefdd„Zdd„Zdd„Zdd„Zdd„Zdd„Zdd „Zd!d"„Zd#d$„Zd%d&„Zd'd(„Zd)d*„Zd+d,„Zd-d.„Zd/d0„Zd1d2„Zd3d4„Z d5d6„Z!d7d8„Z"e e!ƒZ#e e!e"ƒZ$dXd:d;„Z%e e%ƒZ&dd?„Z(d@dA„Z)dBdC„Z*dDdE„Z+dFdG„Z,dHdI„Z-dJdK„Z.dLdM„Z/dYdNdO„Z0dZdPdQ„Z1dRdS„Z2e3dTdU„ƒZ4dS)[Ú SessionBasez- Base class for all Session classes. Z testcookieZworkedNcCs"||_d|_d|_ttjƒ|_dS)NF)Ú _session_keyÚaccessedÚmodifiedrrZSESSION_SERIALIZERÚ serializer©ÚselfÚ session_keyrrrÚ__init__+szSessionBase.__init__cCs ||jkS©N©Ú_session©rÚkeyrrrÚ __contains__1szSessionBase.__contains__cCs |j|SrrrrrrÚ __getitem__4szSessionBase.__getitem__cCs||j|<d|_dS©NT©rr©rrÚvaluerrrÚ __setitem__7s zSessionBase.__setitem__cCs|j|=d|_dSr"r#rrrrÚ __delitem__;szSessionBase.__delitem__cCs d|jjS)Nzdjango.contrib.sessions.)Ú __class__r ©rrrrÚkey_salt?szSessionBase.key_saltcCs|j ||¡Sr)rÚget)rrÚdefaultrrrr+CszSessionBase.getcCs8|jp||jk|_||jkr dn|f}|jj|f|žŽS)Nr)rrÚ_SessionBase__not_givenÚpop)rrr,Úargsrrrr.FszSessionBase.popcCs,||jkr|j|Sd|_||j|<|SdSr"r#r$rrrÚ setdefaultKs    zSessionBase.setdefaultcCs|j||j<dSr)ÚTEST_COOKIE_VALUEÚTEST_COOKIE_NAMEr)rrrÚset_test_cookieSszSessionBase.set_test_cookiecCs| |j¡|jkSr)r+r2r1r)rrrÚtest_cookie_workedVszSessionBase.test_cookie_workedcCs ||j=dSr)r2r)rrrÚdelete_test_cookieYszSessionBase.delete_test_cookiecCstj||j|jddS)zGReturn the given session dictionary serialized and encoded as a string.T)ÚsaltrÚcompress)rÚdumpsr*r)rZ session_dictrrrÚencode\s üzSessionBase.encodecCsXztj||j|jdWStjk r@t d¡}| d¡Yntk rRYnXiS)N)r6rz!django.security.SuspiciousSessionzSession data corrupted) rÚloadsr*rZ BadSignatureÚloggingÚ getLoggerÚwarningÚ Exception)rZ session_dataÚloggerrrrÚdecodeesÿ zSessionBase.decodecCs|j |¡d|_dSr")rÚupdater)rZdict_rrrrAss zSessionBase.updatecCs ||jkSrrrrrrÚhas_keywszSessionBase.has_keycCs |j ¡Sr)rÚkeysr)rrrrCzszSessionBase.keyscCs |j ¡Sr)rÚvaluesr)rrrrD}szSessionBase.valuescCs |j ¡Sr)rÚitemsr)rrrrE€szSessionBase.itemscCsi|_d|_d|_dSr")Ú_session_cacherrr)rrrÚclearƒszSessionBase.clearcCs.z|j o|j WStk r(YdSXdS)zBReturn True when there is no session_key and the session is empty.TN)rrFÚAttributeErrorr)rrrÚis_empty‹szSessionBase.is_emptycCstdtƒ}| |¡s|SqdS)z)Return session key that isn't being used.é N)rÚVALID_KEY_CHARSÚexistsrrrrÚ_get_new_session_key’s  z SessionBase._get_new_session_keycCs|jdkr| ¡|_|jSr)rrMr)rrrÚ_get_or_create_session_key™s  z&SessionBase._get_or_create_session_keycCs|ot|ƒdkS)z” Key must be truthy and at least 8 characters long. 8 characters is an arbitrary lower bound for some minimal key security. é)ÚlenrrrrÚ_validate_session_keyžsz!SessionBase._validate_session_keycCs|jSr)Ú_SessionBase__session_keyr)rrrÚ_get_session_key¥szSessionBase._get_session_keycCs| |¡r||_nd|_dS)zV Validate session key on assignment. Invalid values will set to None. N)rQrR©rr%rrrÚ_set_session_key¨s zSessionBase._set_session_keyFcCsJd|_z|jWStk rB|jdks,|r4i|_n | ¡|_YnX|jS)zž Lazily load session from storage (unless "no_load" is True, when only an empty dict is stored) and store it in the current instance. TN)rrFrHrÚload)rZno_loadrrrÚ _get_session´szSessionBase._get_sessioncCstjSr)rZSESSION_COOKIE_AGEr)rrrÚget_session_cookie_ageÅsz"SessionBase.get_session_cookie_agecKs z |d}Wntk r(t ¡}YnXz |d}Wntk rT| d¡}YnX|sb| ¡St|ttfƒst|St|tƒrˆt |¡}||}|j d|j S)zÕGet the number of seconds until the session expires. Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. Ú modificationÚexpiryÚ_session_expiryi€Q) ÚKeyErrorrÚnowr+rXÚ isinstancerÚstrÚ fromisoformatÚdaysÚseconds)rÚkwargsrYrZÚdeltarrrÚget_expiry_ageÈs     zSessionBase.get_expiry_agecKs’z |d}Wntk r(t ¡}YnXz |d}Wntk rT| d¡}YnXt|tƒrd|St|tƒrxt |¡S|p‚| ¡}|t |dS)zÔGet session the expiry date (as a datetime object). Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. rYrZr[)rb) r\rr]r+r^rr_r`rXr)rrcrYrZrrrÚget_expiry_dateãs      zSessionBase.get_expiry_datecCs`|dkr,z |d=Wntk r&YnXdSt|tƒrBt ¡|}t|tƒrT| ¡}||d<dS)a* Set a custom expiration for the session. ``value`` can be an integer, a Python ``datetime`` or ``timedelta`` object or ``None``. If ``value`` is an integer, the session will expire after that many seconds of inactivity. If set to ``0`` then the session will expire on browser close. If ``value`` is a ``datetime`` or ``timedelta`` object, the session will expire at that specific future time. If ``value`` is ``None``, the session uses the global session expiry policy. Nr[)r\r^rrr]rÚ isoformatrTrrrÚ set_expiryús    zSessionBase.set_expirycCs | d¡}dkrtjS|dkS)a Return ``True`` if the session is set to expire when the browser closes, and ``False`` if there's an expiry date. Use ``get_expiry_date()`` or ``get_expiry_age()`` to find the actual expiry date/age, if there is one. r[Nr)r+rZSESSION_EXPIRE_AT_BROWSER_CLOSE)rrZrrrÚget_expire_at_browser_closesz'SessionBase.get_expire_at_browser_closecCs| ¡| ¡d|_dS)zc Remove the current session data from the database and regenerate the key. N)rGÚdeleterr)rrrÚflush!szSessionBase.flushcCs,|j}|j}| ¡||_|r(| |¡dS)zU Create a new session key, while retaining the current session data. N)rrÚcreaterFrj)rÚdatarrrrÚ cycle_key*s zSessionBase.cycle_keycCs tdƒ‚dS)zF Return True if the given session_key already exists. z9subclasses of SessionBase must provide an exists() methodN©ÚNotImplementedErrorrrrrrL7sÿzSessionBase.existscCs tdƒ‚dS)zÅ Create a new session instance. Guaranteed to create a new object with a unique key and will have saved the result once (with empty data) before the method returns. z8subclasses of SessionBase must provide a create() methodNror)rrrrl?sÿzSessionBase.createcCs tdƒ‚dS)zä Save the session data. If 'must_create' is True, create a new session object (or raise CreateError). Otherwise, only update an existing object and don't create one (raise UpdateError if needed). z6subclasses of SessionBase must provide a save() methodNro)rZ must_createrrrÚsaveIsÿzSessionBase.savecCs tdƒ‚dS)zx Delete the session data under this key. If the key is None, use the current session key value. z8subclasses of SessionBase must provide a delete() methodNrorrrrrjSsÿzSessionBase.deletecCs tdƒ‚dS)z@ Load the session data and return a dictionary. z6subclasses of SessionBase must provide a load() methodNror)rrrrV\sÿzSessionBase.loadcCs tdƒ‚dS)a Remove expired sessions from the session store. If this operation isn't possible on a given backend, it should raise NotImplementedError. If it isn't necessary, because the backend has a built-in expiration mechanism, it should be a no-op. z.This backend does not support clear_expired().Nro)ÚclsrrrÚ clear_expiredds zSessionBase.clear_expired)N)N)F)F)N)5r r r rr2r1Úobjectr-rr r!r&r'Úpropertyr*r+r.r0r3r4r5r9r@rArBrCrDrErGrIrMrNrQrSrUrrrWrrXrerfrhrirkrnrLrlrqrjrVÚ classmethodrsrrrrr!sb            r)r;ÚstringrrZ django.confrZ django.corerZ django.utilsrZdjango.utils.cryptorZdjango.utils.module_loadingrÚascii_lowercaseÚdigitsrKr>r rrrrrrÚs