o {,h>B@sddlZddlZddlmZmZddlmZddlmZddlm Z ddl m Z ddl m Z ddlmZejejZGd d d eZGd d d eZGd ddZdS)N)datetime timedelta) sync_to_async)settings)signing)timezone)get_random_string) import_stringc@eZdZdZdS) CreateErrorz Used internally as a consistent exception type to catch from save (see the docstring for SessionBase.save() for details). N__name__ __module__ __qualname____doc__rr[/var/www/html/rh/venv/lib/python3.10/site-packages/django/contrib/sessions/backends/base.pyr sr c@r ) UpdateErrorzF Occurs if Django tries to update a session that was deleted. Nr rrrrrsrc@sveZdZdZdZdZeZdddZddZ d d Z d d Z d dZ ddZ eddZdddZdddZefddZefddZddZddZdd Zd!d"Zd#d$Zd%d&Zd'd(Zd)d*Zd+d,Zd-d.Zd/d0Zd1d2Zd3d4Z d5d6Z!d7d8Z"d9d:Z#d;d<Z$d=d>Z%d?d@Z&dAdBZ'dCdDZ(dEdFZ)dGdHZ*dIdJZ+dKdLZ,dMdNZ-dOdPZ.dQdRZ/dSdTZ0ee/Z1ee/e0Z2ddVdWZ3ddXdYZ4ee3Z5dZd[Z6d\d]Z7d^d_Z8d`daZ9dbdcZ:dddeZ;dfdgZdldmZ?dndoZ@dpdqZAdrdsZBdtduZCdvdwZDdxdyZEdzd{ZFdd|d}ZGdd~dZHdddZIdddZJddZKddZLeMddZNeMddZOdS) SessionBasez- Base class for all Session classes. testcookieworkedNcCs"||_d|_d|_ttj|_dS)NF) _session_keyaccessedmodifiedr rSESSION_SERIALIZER serializerself session_keyrrr__init__-szSessionBase.__init__cC ||jvSN_sessionrkeyrrr __contains__3 zSessionBase.__contains__cCs |j|Sr!r"r$rrr __getitem__6r'zSessionBase.__getitem__cCs||j|<d|_dSNTr#rrr%valuerrr __setitem__9s  zSessionBase.__setitem__cs||IdH|<d|_dSr)) _aget_sessionrr+rrraset=s zSessionBase.asetcCs|j|=d|_dSr)r*r$rrr __delitem__As zSessionBase.__delitem__cCs d|jjS)Nzdjango.contrib.sessions.) __class__rrrrrkey_saltEs zSessionBase.key_saltcCs|j||Sr!)r#getrr%defaultrrrr4IszSessionBase.getcs|IdH||Sr!)r.r4r5rrragetLzSessionBase.agetcCs:|jp||jv|_||jurdn|f}|jj|g|RSNr)rr#_SessionBase__not_givenpoprr%r6argsrrrr;OszSessionBase.popcsL|jp ||IdHv|_||jurdn|f}|IdHj|g|RSr9)rr.r:r;r<rrrapopTszSessionBase.apopcCs ||jvr |j|S|||<|Sr!r"r+rrr setdefaultYs  zSessionBase.setdefaultcs6|IdH}||vr||S|||IdH|Sr!)r.r/)rr%r,sessionrrr asetdefault`s zSessionBase.asetdefaultcCs|j||j<dSr!)TEST_COOKIE_VALUETEST_COOKIE_NAMEr2rrrset_test_cookiehszSessionBase.set_test_cookiecs||j|jIdHdSr!)r/rCrBr2rrraset_test_cookiekszSessionBase.aset_test_cookiecCs||j|jkSr!)r4rCrBr2rrrtest_cookie_workednszSessionBase.test_cookie_workedcs||jIdH|jkSr!)r7rCrBr2rrratest_cookie_workedqszSessionBase.atest_cookie_workedcCs ||j=dSr!)rCr2rrrdelete_test_cookiets zSessionBase.delete_test_cookiecs|IdH|j=dSr!)r.rCr2rrradelete_test_cookiewr8zSessionBase.adelete_test_cookiecCstj||j|jddS)zGReturn the given session dictionary serialized and encoded as a string.T)saltrcompress)rdumpsr3r)r session_dictrrrencodezs zSessionBase.encodecCsTz tj||j|jdWStjy td}|dYiSty)YiSw)N)rJrz!django.security.SuspiciousSessionzSession data corrupted) rloadsr3r BadSignaturelogging getLoggerwarning Exception)r session_dataloggerrrrdecodes    zSessionBase.decodecCs|j|d|_dSr))r#updaterrdict_rrrrXs  zSessionBase.updatecs |IdH|d|_dSr))r.rXrrYrrraupdates zSessionBase.aupdatecCr r!r"r$rrrhas_keyr'zSessionBase.has_keycs||IdHvSr!)r.r$rrrahas_keyzSessionBase.ahas_keycC |jSr!)r#keysr2rrrr`r'zSessionBase.keysc|IdHSr!)r.r`r2rrrakeysr^zSessionBase.akeyscCr_r!)r#valuesr2rrrrcr'zSessionBase.valuescrar!)r.rcr2rrravaluesr^zSessionBase.avaluescCr_r!)r#itemsr2rrrrer'zSessionBase.itemscrar!)r.rer2rrraitemsr^zSessionBase.aitemscCsi|_d|_d|_dSr))_session_cacherrr2rrrclears zSessionBase.clearcCs(z |j o|j WStyYdSw)zBReturn True when there is no session_key and the session is empty.T)rrgAttributeErrorr2rrris_emptys  zSessionBase.is_emptycCs tdt}||s |Sq)z)Return session key that isn't being used.T )rVALID_KEY_CHARSexistsrrrr_get_new_session_keys   z SessionBase._get_new_session_keycs$ tdt}||IdHs|Sq)NTrk)rrlaexistsrrrr_aget_new_session_keys  z!SessionBase._aget_new_session_keycCs|jdur ||_|jSr!)rrnr2rrr_get_or_create_session_keys  z&SessionBase._get_or_create_session_keycs"|jdur|IdH|_|jSr!)rrpr2rrr_aget_or_create_session_keys z'SessionBase._aget_or_create_session_keycCs|ot|dkS)z Key must be truthy and at least 8 characters long. 8 characters is an arbitrary lower bound for some minimal key security. )lenr$rrr_validate_session_keysz!SessionBase._validate_session_keycCs|jSr!)_SessionBase__session_keyr2rrr_get_session_keyzSessionBase._get_session_keycCs||r ||_dSd|_dS)zV Validate session key on assignment. Invalid values will set to None. N)rurvrr,rrr_set_session_keys   zSessionBase._set_session_keyFcCsLd|_z|jWSty%|jdus|ri|_Y|jS||_Y|jSw)z Lazily load session from storage (unless "no_load" is True, when only an empty dict is stored) and store it in the current instance. TN)rrgrirloadrno_loadrrr _get_sessions  zSessionBase._get_sessioncsTd|_z|jWSty)|jdus|ri|_Y|jS|IdH|_Y|jSwr))rrgriraloadr|rrrr.s zSessionBase._aget_sessioncCstjSr!)rSESSION_COOKIE_AGEr2rrrget_session_cookie_age rxz"SessionBase.get_session_cookie_agecKsz|d}Wn tyt}Ynwz|d}Wnty(|d}Ynw|s/|St|ttfs8|St|trBt|}||}|j d|j S)zGet the number of seconds until the session expires. Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. modificationexpiry_session_expiryQ) KeyErrorrnowr4r isinstancerstr fromisoformatdayssecondsrkwargsrrdeltarrrget_expiry_age s$       zSessionBase.get_expiry_agecsz|d}Wn tyt}Ynwz|d}Wnty,|dIdH}Ynw|s3|St|ttfs<|St|trFt|}||}|j d|j S)Nrrrr) rrrr7rrrrrrrrrrraget_expiry_age's&       zSessionBase.aget_expiry_agecKsz|d}Wn tyt}Ynwz|d}Wnty(|d}Ynwt|tr0|St|tr:t|S|p?|}|t |dS)zGet session the expiry date (as a datetime object). Optionally, this function accepts `modification` and `expiry` keyword arguments specifying the modification and expiry of the session. rrrr) rrrr4rrrrrrrrrrrrrget_expiry_date:s          zSessionBase.get_expiry_datecsz|d}Wn tyt}Ynwz|d}Wnty,|dIdH}Ynwt|tr4|St|tr>t|S|pC|}|t |dS)Nrrrr) rrrr7rrrrrrrrrraget_expiry_dateQs"         zSessionBase.aget_expiry_datecCs^|durz|d=WdStyYdSwt|tr t|}t|tr)|}||d<dS)a* Set a custom expiration for the session. ``value`` can be an integer, a Python ``datetime`` or ``timedelta`` object or ``None``. If ``value`` is an integer, the session will expire after that many seconds of inactivity. If set to ``0`` then the session will expire on browser close. If ``value`` is a ``datetime`` or ``timedelta`` object, the session will expire at that specific future time. If ``value`` is ``None``, the session uses the global session expiry policy. Nr)rrrrrr isoformatryrrr set_expirybs     zSessionBase.set_expirycst|durz |dIdHWdStyYdSwt|tr&t|}t|tr/|}|d|IdHdS)Nr) r>rrrrrrrr/ryrrr aset_expiry~s    zSessionBase.aset_expirycCs |d}dur tjS|dkS)a Return ``True`` if the session is set to expire when the browser closes, and ``False`` if there's an expiry date. Use ``get_expiry_date()`` or ``get_expiry_age()`` to find the actual expiry date/age, if there is one. rNr)r4rSESSION_EXPIRE_AT_BROWSER_CLOSErrrrrget_expire_at_browser_closesz'SessionBase.get_expire_at_browser_closecs(|dIdH}durtjS|dkS)Nrr)r7rrrrrraget_expire_at_browser_closesz(SessionBase.aget_expire_at_browser_closecCs||d|_dS)zc Remove the current session data from the database and regenerate the key. N)rhdeleterr2rrrflushs zSessionBase.flushcs"||IdHd|_dSr!)rhadeleterr2rrraflushs zSessionBase.aflushcCs0|j}|j}|||_|r||dSdSzU Create a new session key, while retaining the current session data. N)r#rcreatergrrdatar%rrr cycle_keyszSessionBase.cycle_keycsF|IdH}|j}|IdH||_|r!||IdHdSdSr)r.racreatergrrrrr acycle_keyszSessionBase.acycle_keycCtd)zF Return True if the given session_key already exists. z9subclasses of SessionBase must provide an exists() methodNotImplementedErrorrrrrrmzSessionBase.existsct|j|IdHSr!)rrmrrrrrozSessionBase.aexistscCr)z Create a new session instance. Guaranteed to create a new object with a unique key and will have saved the result once (with empty data) before the method returns. z8subclasses of SessionBase must provide a create() methodrr2rrrrzSessionBase.createct|jIdHSr!)rrr2rrrrr^zSessionBase.acreatecCr)z Save the session data. If 'must_create' is True, create a new session object (or raise CreateError). Otherwise, only update an existing object and don't create one (raise UpdateError if needed). z6subclasses of SessionBase must provide a save() methodrr must_createrrrsaverzSessionBase.savecrr!)rrrrrrasaverzSessionBase.asavecCr)zx Delete the session data under this key. If the key is None, use the current session key value. z8subclasses of SessionBase must provide a delete() methodrrrrrrszSessionBase.deletecrr!)rrrrrrrrzSessionBase.adeletecCr)z@ Load the session data and return a dictionary. z6subclasses of SessionBase must provide a load() methodrr2rrrr{rzSessionBase.loadcrr!)rr{r2rrrrr^zSessionBase.aloadcCr)a Remove expired sessions from the session store. If this operation isn't possible on a given backend, it should raise NotImplementedError. If it isn't necessary, because the backend has a built-in expiration mechanism, it should be a no-op. z.This backend does not support clear_expired().rclsrrr clear_expireds zSessionBase.clear_expiredcrr!)rrrrrraclear_expired szSessionBase.aclear_expiredr!)F)Pr rrrrCrBobjectr:rr&r(r-r/r0propertyr3r4r7r;r>r?rArDrErFrGrHrIrNrWrXr[r\r]r`rbrcrdrerfrhrjrnrprqrrrurwrzrrr~r.r#rrrrrrrrrrrrrrmrorrrrrrr{r classmethodrrrrrrr#s                    r)rQstringrr asgiref.syncr django.confr django.corer django.utilsrdjango.utils.cryptordjango.utils.module_loadingr ascii_lowercasedigitsrlrTr rrrrrrs