a -=ic2@sUddlZddlZddlZddlZddlZddlZejr8dZdZ e ddej j ej j fDZejeed<eeddd Zeeeejeefd d d ZdeeeedddZeeedddZeeejedddZdS)NZ>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789iccs"|]}|dur|dkr|VqdS)N/.0seprrb/home/droni/.local/share/virtualenvs/DPS-5Je3_V2c/lib/python3.9/site-packages/werkzeug/security.py sr _os_alt_seps)lengthreturncCs(|dkrtddddt|DS)zAGenerate a random string of SALT_CHARS with specified ``length``.rzSalt length must be positivecss|]}ttVqdSN)secretschoice SALT_CHARS)r_rrrrzgen_salt..) ValueErrorjoinrange)r rrrgen_saltsr)methodsaltpasswordr cCs|dkr||fS|d}|d}|dr|s:td|ddd}t|dvr`td |d }|r~t|d pzd nt}t |||| d|d|fS|rt ||| |fSt || |fS) zInternal password hash helper. Supports plaintext without salt, unsalted and salted passwords. In case salted passwords are used hmac is used. plainzutf-8zpbkdf2:zSalt is required for PBKDF2N:)z&Invalid number of arguments for PBKDF2r)encode startswithrsplitlenpopintDEFAULT_PBKDF2_ITERATIONShashlib pbkdf2_hmachexhmacnew hexdigest)rrrargsZ iterationsrrr_hash_internals$     r- pbkdf2:sha256)rr salt_lengthr cCs8|dkrt|nd}t|||\}}|d|d|S)aHash a password with the given method and salt with a string of the given length. The format of the string returned includes the method that was used so that :func:`check_password_hash` can check the hash. The format for the hashed string looks like this:: method$salt$hash This method can **not** generate unsalted passwords but it is possible to set param method='plain' in order to enforce plaintext passwords. If a salt is used, hmac is used internally to salt the password. If PBKDF2 is wanted it can be enabled by setting the method to ``pbkdf2:method:iterations`` where iterations is optional:: pbkdf2:sha256:80000$salt$hash pbkdf2:sha256$salt$hash :param password: the password to hash. :param method: the hash method to use (one that hashlib supports). Can optionally be in the format ``pbkdf2:method:iterations`` to enable PBKDF2. :param salt_length: the length of the salt in letters. rr $)rr-)rrr0rhZ actual_methodrrrgenerate_password_hash<sr3)pwhashrr cCs<|ddkrdS|dd\}}}tt|||d|S)aCheck a password against a given salted and hashed password value. In order to support unsalted legacy passwords this method supports plain text passwords, md5 and sha1 hashes (both salted and unsalted). Returns `True` if the password matched, `False` otherwise. :param pwhash: a hashed string like returned by :func:`generate_password_hash`. :param password: the plaintext password to compare against the hash. r1rFr)countr!r)compare_digestr-)r4rrrZhashvalrrrcheck_password_hash\s r7) directory pathnamesr csx|sd}|g}|D]Zdkr(ttfddtDs\tjs\dks\drbdS|qtj |S)a2Safely join zero or more untrusted path components to a base directory to avoid escaping the base directory. :param directory: The trusted base directory. :param pathnames: The untrusted path components relative to the base directory. :return: A safe path, otherwise ``None``. .r c3s|]}|vVqdSr rrfilenamerrrrzsafe_join..z..z../N) posixpathnormpathanyr ospathisabsr appendr)r8r9partsrr;r safe_joinns"    rE)r.r/)r&r)r@r=rtypingt TYPE_CHECKINGrr%listrAraltsepr Liststr__annotations__r$rTupler-r3boolr7OptionalrErrrrs( "