o ó<âgW!ã@s„ddlmZddlmZddlmZmZmZeƒZGdd„dƒZ Gdd„de ƒZ Gdd „d e ƒZGd d„de ƒZGdd „d eƒZ dS)é)Úget_user_model)Ú Permission)ÚExistsÚOuterRefÚQc@sDeZdZdd„Zdd„Zddd„Zddd „Zdd d„Zddd „ZdS)ÚBaseBackendcKódS©N©)ÚselfÚrequestÚkwargsr r úO/var/www/html/venv/lib/python3.10/site-packages/django/contrib/auth/backends.pyÚauthenticate ózBaseBackend.authenticatecCrr r )rÚuser_idr r rÚget_userrzBaseBackend.get_userNcCótƒSr ©Úset©rÚuser_objÚobjr r rÚget_user_permissionsóz BaseBackend.get_user_permissionscCrr rrr r rÚget_group_permissionsrz!BaseBackend.get_group_permissionscCs h|j||d£|j||d£S©N)r)rrrr r rÚget_all_permissionss ÿþzBaseBackend.get_all_permissionscCs||j||dvSr)r©rrÚpermrr r rÚhas_permszBaseBackend.has_permr ) Ú__name__Ú __module__Ú__qualname__rrrrrr r r r rrs rcsˆeZdZdZddd„Zdd„Zdd„Zd d „Zdd„Zdd d„Z ddd„Z d‡fdd„ Zd‡fdd„ Zdd„Z ddd„Zdd„Z‡ZS)ÚModelBackendz9 Authenticates against settings.AUTH_USER_MODEL. NcKs||dur | tj¡}|dus|durdSztj |¡}Wntjy-tƒ |¡YdSw| |¡r:| |¡r<|SdSdSr ) ÚgetÚ UserModelÚUSERNAME_FIELDÚ_default_managerÚget_by_natural_keyÚDoesNotExistÚset_passwordÚcheck_passwordÚuser_can_authenticate)rrÚusernameÚpasswordr Úuserr r rr$sýÿzModelBackend.authenticatecCst|ddƒS)z{ Reject users with is_active=False. Custom user models that don't have that attribute are allowed. Ú is_activeT)Úgetattr©rr0r r rr-3sz"ModelBackend.user_can_authenticatecCs |j ¡Sr )Úuser_permissionsÚall)rrr r rÚ_get_user_permissions:s z"ModelBackend._get_user_permissionscCs0tƒj d¡}d| ¡}tjjdi||i¤ŽS)NÚgroupsz group__%sr )rÚ_metaÚ get_fieldÚrelated_query_namerÚobjectsÚfilter)rrÚuser_groups_fieldÚuser_groups_queryr r rÚ_get_group_permissions=sz#ModelBackend._get_group_permissionscCs€|jr |js |dur tƒSd|}t||ƒs;|jrtj ¡}n t|d|ƒ|ƒ}| dd¡ ¡}t||dd„|Dƒƒt||ƒS)zá Return the permissions of `user_obj` from `from_name`. `from_name` can be either "group" or "user" to return permissions from `_get_group_permissions` or `_get_user_permissions` respectively. Nz_%s_perm_cachez_get_%s_permissionsÚcontent_type__app_labelÚcodenamecSsh|] \}}d||f’qS)z%s.%sr )Ú.0ÚctÚnamer r rÚ Ssz0ModelBackend._get_permissions..)r1Úis_anonymousrÚhasattrÚis_superuserrr;r5r2Úvalues_listÚorder_byÚsetattr)rrrÚ from_nameÚperm_cache_nameÚpermsr r rÚ_get_permissionsBs ÿ zModelBackend._get_permissionscCó| ||d¡S)zs Return a set of permission strings the user `user_obj` has from their `user_permissions`. r0©rOrr r rrWóz!ModelBackend.get_user_permissionscCrP)zq Return a set of permission strings the user `user_obj` has from the groups they belong. ÚgrouprQrr r rr^rRz"ModelBackend.get_group_permissionscs8|jr |js |dur tƒSt|dƒstƒ |¡|_|jS)NÚ_perm_cache)r1rFrrGÚsuperrrTr©Ú __class__r rres z ModelBackend.get_all_permissionscs|jotƒj|||dSr)r1rUr rrVr rr lszModelBackend.has_permcs"|jot‡fdd„| |¡DƒƒS)zU Return True if user_obj has any permissions in the given app_label. c3s&|]}|d| d¡…ˆkVqdS)NÚ.)Úindex)rBr©Ú app_labelr rÚ ss €ÿ ÿz0ModelBackend.has_module_perms..)r1Úanyr)rrr[r rZrÚhas_module_permsosþzModelBackend.has_module_permsTc Csät|tƒrz | d¡\}}Wntytdƒ‚wt|tƒs#tdƒ‚|dur,tj ¡St t dƒdt t dƒdB}t|tƒrH|t |jdM}n|t ||d M}ttj |¡ƒ}|ra|t d dO}|durl|t |dM}tj |¡S) z Return users that have permission "perm". By default, filter out inactive users and include superusers. rXzDPermission name should be in the form app_label.permission_codename.z>The `perm` argument must be a string or a permission instance.NÚpk)Úgroup__user)r0©r_)rAr@T)rH)r1)Ú isinstanceÚstrÚsplitÚ ValueErrorrÚ TypeErrorr&r(Únonerrr_rr;r<) rrr1Úinclude_superusersrr[rAÚpermission_qÚuser_qr r rÚ with_permxs0 ÿÿ ÿ zModelBackend.with_permcCs<z tjj|d}WntjyYdSw| |¡r|SdS)Nra)r&r(r%r*r-)rrr0r r rr›sÿzModelBackend.get_user)NNr )TTN)r!r"r#Ú__doc__rr-r6r?rOrrrr r^rkrÚ __classcell__r r rVrr$s #r$c@óeZdZdd„ZdS)ÚAllowAllUsersModelBackendcCódS©NTr r3r r rr-¤rz/AllowAllUsersModelBackend.user_can_authenticateN©r!r"r#r-r r r rro£óroc@s.eZdZdZdZdd„Zdd„Zd dd„Zd S)ÚRemoteUserBackendaÆ This backend is to be used in conjunction with the ``RemoteUserMiddleware`` found in the middleware module of this package, and is used when the server is handling authentication outside of Django. By default, the ``authenticate`` method creates ``User`` objects for usernames that don't already exist in the database. Subclasses can disable this behavior by setting the ``create_unknown_user`` attribute to ``False``. TcCs†|sdSd}d}| |¡}|jrtjjditj|i¤Ž\}}nztj |¡}Wn tjy1Ynw|j|||d}| |¡rA|SdS)ai The username passed as ``remote_user`` is considered trusted. Return the ``User`` object with the given username. Create a new ``User`` object if ``create_unknown_user`` is ``True``. Return None if ``create_unknown_user`` is ``False`` and a ``User`` object with the given username is not found in the database. NF)Úcreatedr ) Úclean_usernameÚcreate_unknown_userr&r(Ú get_or_creater'r)r*Úconfigure_userr-)rrÚremote_userrur0r.r r rr·s ÿÿzRemoteUserBackend.authenticatecCs|S)zÆ Perform any cleaning on the "username" prior to using it to get or create the user object. Return the cleaned username. By default, return the username unchanged. r )rr.r r rrvÕsz RemoteUserBackend.clean_usernamecCs|S)zp Configure a user and return the updated user. By default, return the user unmodified. r )rrr0rur r rryÞsz RemoteUserBackend.configure_userN)T)r!r"r#rlrwrrvryr r r rrt¨s rtc@rn)ÚAllowAllUsersRemoteUserBackendcCrprqr r3r r rr-èrz4AllowAllUsersRemoteUserBackend.user_can_authenticateNrrr r r rr{çrsr{N)Údjango.contrib.authrÚdjango.contrib.auth.modelsrÚdjango.db.modelsrrrr&rr$rortr{r r r rÚs?