a Oc4$@sddlZddlmZddlmZddlmZmZmZddl m Z ddl m Z eZ GdddZGd d d eZGd d d eZGd ddeZGdddeZdS)N)get_user_model) Permission)ExistsOuterRefQ)RemovedInDjango50Warning)func_supports_parameterc@sDeZdZddZddZdddZddd Zdd d Zdd d ZdS) BaseBackendcKsdSN)selfrequestkwargsr r S/var/www/html/gsl.tools/lib/python3.9/site-packages/django/contrib/auth/backends.py authenticate szBaseBackend.authenticatecCsdSr r )r user_idr r rget_userszBaseBackend.get_userNcCstSr setr user_objobjr r rget_user_permissionssz BaseBackend.get_user_permissionscCstSr rrr r rget_group_permissionssz!BaseBackend.get_group_permissionscCs h|j||d|j||dSN)r)rrrr r rget_all_permissionss   zBaseBackend.get_all_permissionscCs||j||dvSr)rr rpermrr r rhas_permszBaseBackend.has_perm)N)N)N)N) __name__ __module__ __qualname__rrrrrrr r r rr s    r cseZdZdZdddZddZddZd d Zd d Zdd dZ dddZ dfdd Z d fdd Z ddZ d!ddZddZZS)" ModelBackendz9 Authenticates against settings.AUTH_USER_MODEL. NcKsv|dur|tj}|dus$|dur(dSztj|}Wn tjyXt|Yn0||rr||rr|SdSr ) get UserModelUSERNAME_FIELD_default_managerget_by_natural_key DoesNotExist set_passwordZcheck_passworduser_can_authenticate)r r usernamepasswordruserr r rr(s zModelBackend.authenticatecCst|dd}|p|duS)z{ Reject users with is_active=False. Custom user models that don't have that attribute are allowed. is_activeN)getattr)r r-r.r r rr*7s z"ModelBackend.user_can_authenticatecCs |jSr )Zuser_permissionsall)r rr r r_get_user_permissions?sz"ModelBackend._get_user_permissionscCs0tjd}d|}tjjfi||iS)Ngroupsz group__%s)rZ_meta get_fieldZrelated_query_namerobjectsfilter)r rZuser_groups_fieldZuser_groups_queryr r r_get_group_permissionsBs z#ModelBackend._get_group_permissionscCs|jr|js|durtSd|}t||sv|jr>tj}nt|d||}| dd }t ||dd|Dt||S)z Return the permissions of `user_obj` from `from_name`. `from_name` can be either "group" or "user" to return permissions from `_get_group_permissions` or `_get_user_permissions` respectively. Nz_%s_perm_cachez_get_%s_permissionscontent_type__app_labelcodenamecSsh|]\}}d||fqS)z%s.%sr ).0ctnamer r r Xz0ModelBackend._get_permissions..) r. is_anonymousrhasattr is_superuserrr4r0r/Z values_listZorder_bysetattr)r rr from_nameZperm_cache_nameZpermsr r r_get_permissionsGs  zModelBackend._get_permissionscCs|||dS)zs Return a set of permission strings the user `user_obj` has from their `user_permissions`. r-rCrr r rr\sz!ModelBackend.get_user_permissionscCs|||dS)zq Return a set of permission strings the user `user_obj` has from the groups they belong. grouprDrr r rrcsz"ModelBackend.get_group_permissionscs8|jr|js|durtSt|ds2t||_|jS)N _perm_cache)r.r>rr?superrrFr __class__r rrjs  z ModelBackend.get_all_permissionscs|jotj|||dSr)r.rGrrrHr rrqszModelBackend.has_permcs"|jo tfdd||DS)zU Return True if user_obj has any permissions in the given app_label. c3s$|]}|d|dkVqdS)N.)index)r9r app_labelr r xsz0ModelBackend.has_module_perms..)r.anyr)r rrMr rLrhas_module_permstszModelBackend.has_module_permsTc Cst|tr:z|d\}}WqLty6tdYqL0nt|tsLtd|dur^tjSt t ddt t ddB}t|tr|t |j dM}n|t ||d M}t tj |}|r|t d d O}|dur|t |d M}tj|S) z Return users that have permission "perm". By default, filter out inactive users and include superusers. rJzDPermission name should be in the form app_label.permission_codename.z>The `perm` argument must be a string or a permission instance.Npk)Z group__user)r-rQ)r8r7T)r@)r.) isinstancestrsplit ValueErrorr TypeErrorr$r&nonerrrQrr4r5) r rr.Zinclude_superusersrrMr8Z permission_qZuser_qr r r with_perm}s.      zModelBackend.with_permcCs<ztjj|d}Wntjy(YdS0||r8|SdS)NrR)r$r&r#r(r*)r rr-r r rrs zModelBackend.get_user)NN)N)N)N)N)TTN)rr r!__doc__rr*r1r6rCrrrrrPrYr __classcell__r r rHrr"#s    #r"c@seZdZddZdS)AllowAllUsersModelBackendcCsdSNTr r r-r r rr*sz/AllowAllUsersModelBackend.user_can_authenticateNrr r!r*r r r rr\sr\c@s.eZdZdZdZddZddZd ddZd S) RemoteUserBackenda This backend is to be used in conjunction with the ``RemoteUserMiddleware`` found in the middleware module of this package, and is used when the server is handling authentication outside of Django. By default, the ``authenticate`` method creates ``User`` objects for usernames that don't already exist in the database. Subclasses can disable this behavior by setting the ``create_unknown_user`` attribute to ``False``. TcCs|sdSd}d}||}|jr>tjjfitj|i\}}n&ztj|}WntjybYn0t|j dr|j |||d}n*t j d|j j dtd|r| ||}||r|SdS)ai The username passed as ``remote_user`` is considered trusted. Return the ``User`` object with the given username. Create a new ``User`` object if ``create_unknown_user`` is ``True``. Return None if ``create_unknown_user`` is ``False`` and a ``User`` object with the given username is not found in the database. NFcreated)raz1`created=True` must be added to the signature of z.configure_user().)category)clean_usernamecreate_unknown_userr$r&Z get_or_creater%r'r(rconfigure_userwarningswarnrIr!rr*)r r Z remote_userrar-r+r r rrs0      zRemoteUserBackend.authenticatecCs|S)z Perform any cleaning on the "username" prior to using it to get or create the user object. Return the cleaned username. By default, return the username unchanged. r )r r+r r rrcsz RemoteUserBackend.clean_usernamecCs|S)zp Configure a user and return the updated user. By default, return the user unmodified. r )r r r-rar r rresz RemoteUserBackend.configure_userN)T)rr r!rZrdrrcrer r r rr`s  * r`c@seZdZddZdS)AllowAllUsersRemoteUserBackendcCsdSr]r r^r r rr*sz4AllowAllUsersRemoteUserBackend.user_can_authenticateNr_r r r rrhsrh)rfZdjango.contrib.authrZdjango.contrib.auth.modelsrZdjango.db.modelsrrrZdjango.utils.deprecationrZdjango.utils.inspectrr$r r"r\r`rhr r r rs    K