92 lines
11 KiB
Plaintext
92 lines
11 KiB
Plaintext
|
Ë
|
|||
|
|
êÅÙj¯% ã óÞ — d dl mZ d dlmZ d dlZd dlZd dlZddl m
|
|||
|
|
Z
|
|||
|
|
ddl m Z ddl m Z ddl m
|
|||
|
|
Z
|
|||
|
|
ddlmZ G d „ d
|
|||
|
|
« Z G d „ d e« Zddd
|
|||
|
|
„Z G d„ de« Z dd„Z G d„ d« Zy)é )Ú annotationsNé )Ú_base64_alphabet)Ú
|
|||
|
|
base64_decode)Ú
|
|||
|
|
base64_encode)Ú
|
|||
|
|
want_bytes)Ú BadSignaturec ó — e Zd ZdZdd„Zdd„Zy)ÚSigningAlgorithmzgSubclasses must implement :meth:`get_signature` to provide
|
|||
|
|
signature generation functionality.
|
|||
|
|
c ó — t « ‚)z2Returns the signature for the given key and value.)ÚNotImplementedError©ÚselfÚkeyÚvalues úWC:\Users\30997\AppData\Local\Temp\pip-target-6g32zz5s\lib\python\itsdangerous/signer.pyÚ
|
|||
|
|
get_signaturez SigningAlgorithm.get_signature s € ä!Ó#Ð#ó c óN — t j || j ||« « S )zMVerifies the given signature matches the expected
|
|||
|
|
signature.
|
|||
|
|
)ÚhmacÚcompare_digestr )r r r Úsigs r Úverify_signaturez!SigningAlgorithm.verify_signature s$ € ô ×"Ñ" 3¨×(:Ñ(:¸3ÀÓ(FÓGÐGr N©r Úbytesr r Úreturnr )r r r r r r r Úbool)Ú__name__Ú
|
|||
|
|
__module__Ú __qualname__Ú__doc__r r © r r r r s „ ñó$ôHr r c ó — e Zd ZdZdd„Zy)Ú
|
|||
|
|
NoneAlgorithmz`Provides an algorithm that does not perform any signing and
|
|||
|
|
returns an empty signature.
|
|||
|
|
c ó — y)Nr r" r s r r zNoneAlgorithm.get_signature$ s € Ør Nr )r r r r! r r" r r r$ r$ s „ ñôr r$ c ó, — t j | « S )zÈDon't access ``hashlib.sha1`` until runtime. FIPS builds may not include
|
|||
|
|
SHA-1, in which case the import and use as a default would fail before the
|
|||
|
|
developer can configure something else.
|
|||
|
|
)ÚhashlibÚsha1)Ústrings r Ú
|
|||
|
|
_lazy_sha1r* ( s € ô
|
|||
|
|
�<‰<˜Ó Ð r c ó> — e Zd ZU dZ ee« Zded< ddd„Zd d„Z y)
|
|||
|
|
Ú
|
|||
|
|
HMACAlgorithmz*Provides signature generation using HMACs.út.AnyÚdefault_digest_methodNc ó. — |€ | j }|| _ y ©N)r. Ú
|
|||
|
|
digest_method)r r1 s r Ú__init__zHMACAlgorithm.__init__8 s € Ø Ð Ø × 6Ñ 6ˆMà$1ˆÕr c óf — t j ||| j ¬« }|j « S )N)ÚmsgÚ digestmod)r Únewr1 Údigest)r r r Úmacs r r zHMACAlgorithm.get_signature> s& € Ü�h‰h�s °×1CÑ1CÔDˆØ�z‰z‹|Ðr r0 )r1 r- r )
|
|||
|
|
r r r r! Ú staticmethodr* r. Ú__annotations__r2 r r" r r r, r, 0 s! … Ù4ñ
|
|||
|
|
$0°
|
|||
|
|
Ó#;И5Ó;ô2ô r r, c ó‚ — t | t t f« r t | « gS | D �cg c]
|
|||
|
|
}t |« ‘Œ c}S c c}w r0 )Ú
|
|||
|
|
isinstanceÚstrr r )Ú
|
|||
|
|
secret_keyÚss r Ú_make_keys_listr@ C s< € ô �*œs¤E˜lÔ+ܘ:Ó&Ð'Ð'á#-Ó .¡:˜aŒJ�q�M :Ñ .Ð.ùÒ .s §<c ó¨ — e Zd ZU dZ ee« Zded< dZded< d dd„Z e
|
|||
|
|
dd „« Z ddd
|
|||
|
|
„Z dd „Z
|
|||
|
|
dd „Zdd
|
|||
|
|
„Zdd„Zdd„Zy)ÚSigneraÖ A signer securely signs bytes, then unsigns them to verify that
|
|||
|
|
the value hasn't been changed.
|
|||
|
|
|
|||
|
|
The secret key should be a random string of ``bytes`` and should not
|
|||
|
|
be saved to code or version control. Different salts should be used
|
|||
|
|
to distinguish signing in different contexts. See :doc:`/concepts`
|
|||
|
|
for information about the security of the secret key and salt.
|
|||
|
|
|
|||
|
|
:param secret_key: The secret key to sign and verify with. Can be a
|
|||
|
|
list of keys, oldest to newest, to support key rotation.
|
|||
|
|
:param salt: Extra key to combine with ``secret_key`` to distinguish
|
|||
|
|
signatures in different contexts.
|
|||
|
|
:param sep: Separator between the signature and value.
|
|||
|
|
:param key_derivation: How to derive the signing key from the secret
|
|||
|
|
key and salt. Possible values are ``concat``, ``django-concat``,
|
|||
|
|
or ``hmac``. Defaults to :attr:`default_key_derivation`, which
|
|||
|
|
defaults to ``django-concat``.
|
|||
|
|
:param digest_method: Hash function to use when generating the HMAC
|
|||
|
|
signature. Defaults to :attr:`default_digest_method`, which
|
|||
|
|
defaults to :func:`hashlib.sha1`. Note that the security of the
|
|||
|
|
hash alone doesn't apply when used intermediately in HMAC.
|
|||
|
|
:param algorithm: A :class:`SigningAlgorithm` instance to use
|
|||
|
|
instead of building a default :class:`HMACAlgorithm` with the
|
|||
|
|
``digest_method``.
|
|||
|
|
|
|||
|
|
.. versionchanged:: 2.0
|
|||
|
|
Added support for key rotation by passing a list to
|
|||
|
|
``secret_key``.
|
|||
|
|
|
|||
|
|
.. versionchanged:: 0.18
|
|||
|
|
``algorithm`` was added as an argument to the class constructor.
|
|||
|
|
|
|||
|
|
.. versionchanged:: 0.14
|
|||
|
|
``key_derivation`` and ``digest_method`` were added as arguments
|
|||
|
|
to the class constructor.
|
|||
|
|
r- r. ú
|
|||
|
|
django-concatr= Údefault_key_derivationNc ó< — t |« | _ t |« | _ | j t v r t d« ‚|� t |« }nd}|| _ |€ | j }|| _ |€ | j }|| _
|
|||
|
|
|€t | j « }|| _ y )NzŠThe given separator cannot be used because it may be contained in the signature itself. ASCII letters, digits, and '-_=' must not be used.ó itsdangerous.Signer)
|
|||
|
|
r@ Ú secret_keysr Úsepr Ú
|
|||
|
|
ValueErrorÚsaltrD Úkey_derivationr. r1 r, Ú algorithm)r r> rJ rH rK r1 rL s r r2 zSigner.__init__� s¨ € ô )8¸
|
|||
|
|
Ó(CˆÔÜ$ S›/ˆŒà �8‰8Ô'Ñ 'Ü ð7óð
|
|||
|
|
ð Ð Ü ˜dÓ#‰Dà)ˆDàˆŒ à Ð !Ø !× 8Ñ 8ˆNà#1ˆÔà Ð Ø × 6Ñ 6ˆMà$1ˆÔà Ð Ü% d×&8Ñ&8Ó9ˆIà+4ˆ�r c ó — | j d S )z�The newest (last) entry in the :attr:`secret_keys` list. This
|
|||
|
|
is for compatibility from before key rotation support was added.
|
|||
|
|
éÿÿÿÿ)rG )r s r r> zSigner.secret_key¯ s € ð
|
|||
|
|
× Ñ Ñ#Ð#r c ó| — |€| j d }n t |« }| j dk( rDt j t
|
|||
|
|
| j
|
|||
|
|
| j |z « j « « S | j dk( rGt j t
|
|||
|
|
| j
|
|||
|
|
| j dz |z « j « « S | j dk( rLt j || j ¬« }|j | j « |j « S | j dk( r|S t d« ‚) aü This method is called to derive the key. The default key
|
|||
|
|
derivation choices can be overridden here. Key derivation is not
|
|||
|
|
intended to be used as a security method to make a complex key
|
|||
|
|
out of a short password. Instead you should use large random
|
|||
|
|
secret keys.
|
|||
|
|
|
|||
|
|
:param secret_key: A specific secret key to derive from.
|