o h4$@sddlZddlmZddlmZddlmZmZmZddl m Z ddl m Z eZ GdddZGd d d eZGd d d eZGd ddeZGdddeZdS)N)get_user_model) Permission)ExistsOuterRefQ)RemovedInDjango50Warning)func_supports_parameterc@sDeZdZddZddZdddZddd Zdd d Zdd d ZdS) BaseBackendcKdSN)selfrequestkwargsr r N/var/www/html/env/lib/python3.10/site-packages/django/contrib/auth/backends.py authenticate zBaseBackend.authenticatecCr r r )r user_idr r rget_userrzBaseBackend.get_userNcCtSr setr user_objobjr r rget_user_permissionsz BaseBackend.get_user_permissionscCrr rrr r rget_group_permissionsrz!BaseBackend.get_group_permissionscCs h|j||d|j||dSN)r)rrrr r rget_all_permissionss   zBaseBackend.get_all_permissionscCs||j||dvSr)rr rpermrr r rhas_permszBaseBackend.has_permr ) __name__ __module__ __qualname__rrrrrr"r r r rr s   r cseZdZdZdddZddZddZd d Zd d Zdd dZ dddZ dfdd Z dfdd Z ddZ dddZddZZS) ModelBackendz9 Authenticates against settings.AUTH_USER_MODEL. NcKs||dur |tj}|dus|durdSztj|}Wntjy-t|YdSw||r:||r<|SdSdSr ) get UserModelUSERNAME_FIELD_default_managerget_by_natural_key DoesNotExist set_passwordcheck_passworduser_can_authenticate)r rusernamepasswordruserr r rr(s zModelBackend.authenticatecCst|dd}|p |duS)z{ Reject users with is_active=False. Custom user models that don't have that attribute are allowed. is_activeN)getattr)r r2r3r r rr/7s  z"ModelBackend.user_can_authenticatecCs |jSr )user_permissionsall)r rr r r_get_user_permissions?s z"ModelBackend._get_user_permissionscCs0tjd}d|}tjjdi||iS)Ngroupsz group__%sr )r_meta get_fieldrelated_query_namerobjectsfilter)r ruser_groups_fielduser_groups_queryr r r_get_group_permissionsBs z#ModelBackend._get_group_permissionscCs|jr |js |dur tSd|}t||s;|jrtj}n t|d||}| dd }t ||dd|Dt||S)z Return the permissions of `user_obj` from `from_name`. `from_name` can be either "group" or "user" to return permissions from `_get_group_permissions` or `_get_user_permissions` respectively. Nz_%s_perm_cachez_get_%s_permissionscontent_type__app_labelcodenamecSsh|] \}}d||fqS)z%s.%sr ).0ctnamer r r Xsz0ModelBackend._get_permissions..) r3 is_anonymousrhasattr is_superuserrr<r6r4 values_listorder_bysetattr)r rr from_nameperm_cache_namepermsr r r_get_permissionsGs   zModelBackend._get_permissionscC|||dS)zs Return a set of permission strings the user `user_obj` has from their `user_permissions`. r2rPrr r rr\z!ModelBackend.get_user_permissionscCrQ)zq Return a set of permission strings the user `user_obj` has from the groups they belong. grouprRrr r rrcrSz"ModelBackend.get_group_permissionscs8|jr |js |dur tSt|dst||_|jS)N _perm_cache)r3rGrrHsuperrrUr __class__r rrjs  z ModelBackend.get_all_permissionscs|jo tj|||dSr)r3rVr"r rWr rr"qszModelBackend.has_permcs"|jotfdd||DS)zU Return True if user_obj has any permissions in the given app_label. c3s&|]}|d|dkVqdS)N.)index)rCr! app_labelr r xs  z0ModelBackend.has_module_perms..)r3anyr)r rr\r r[rhas_module_permstszModelBackend.has_module_permsTc Cst|trz |d\}}Wntytdwt|ts#td|dur,tjSt t ddt t ddB}t|trH|t |j dM}n|t ||d M}t tj |}|ra|t d d O}|durl|t |d M}tj|S) z Return users that have permission "perm". By default, filter out inactive users and include superusers. rYzDPermission name should be in the form app_label.permission_codename.z>The `perm` argument must be a string or a permission instance.Npk) group__user)r2r`)rBrAT)rI)r3) isinstancestrsplit ValueErrorr TypeErrorr(r*nonerrr`rr<r=) r r!r3include_superusersrr\rB permission_quser_qr r r with_perm}s0      zModelBackend.with_permcCs<z tjj|d}Wn tjyYdSw||r|SdS)Nrb)r(r*r'r,r/)r rr2r r rrs zModelBackend.get_user)NNr )TTN)r#r$r%__doc__rr/r7r@rPrrrr"r_rlr __classcell__r r rWrr&#s    #r&c@eZdZddZdS)AllowAllUsersModelBackendcCdSNTr r r2r r rr/rz/AllowAllUsersModelBackend.user_can_authenticateNr#r$r%r/r r r rrp rpc@s.eZdZdZdZddZddZd ddZd S) RemoteUserBackenda This backend is to be used in conjunction with the ``RemoteUserMiddleware`` found in the middleware module of this package, and is used when the server is handling authentication outside of Django. By default, the ``authenticate`` method creates ``User`` objects for usernames that don't already exist in the database. Subclasses can disable this behavior by setting the ``create_unknown_user`` attribute to ``False``. TcCs|sdSd}d}||}|jrtjjditj|i\}}nztj|}Wn tjy1Ynwt|j drA|j |||d}nt j d|j j dtd|rV| ||}||r]|SdS) ai The username passed as ``remote_user`` is considered trusted. Return the ``User`` object with the given username. Create a new ``User`` object if ``create_unknown_user`` is ``True``. Return None if ``create_unknown_user`` is ``False`` and a ``User`` object with the given username is not found in the database. NFcreated)rwz1`created=True` must be added to the signature of z.configure_user().)categoryr )clean_usernamecreate_unknown_userr(r* get_or_creater)r+r,rconfigure_userwarningswarnrXr%rr/)r r remote_userrwr2r0r r rrs2      zRemoteUserBackend.authenticatecCs|S)z Perform any cleaning on the "username" prior to using it to get or create the user object. Return the cleaned username. By default, return the username unchanged. r )r r0r r rrysz RemoteUserBackend.clean_usernamecCs|S)zp Configure a user and return the updated user. By default, return the user unmodified. r )r rr2rwr r rr|sz RemoteUserBackend.configure_userN)T)r#r$r%rmrzrryr|r r r rrvs  * rvc@ro)AllowAllUsersRemoteUserBackendcCrqrrr rsr r rr/rz4AllowAllUsersRemoteUserBackend.user_can_authenticateNrtr r r rrrur)r}django.contrib.authrdjango.contrib.auth.modelsrdjango.db.modelsrrrdjango.utils.deprecationrdjango.utils.inspectrr(r r&rprvrr r r rs    K