rRhUddlmZddlZddlZddlZddlZddlZdZdZe dejejjfDZ ded<d dZdd Z d dd Zdd Zdd Zy)) annotationsN>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789i@Bc#2K|]}||dk7s |yw)N/).0seps I/var/www/timesheet/venv/lib/python3.12/site-packages/werkzeug/security.py r s s3#:Cs z list[str] _os_alt_sepscd|dkr tddjdt|DS)zAGenerate a random string of SALT_CHARS with specified ``length``.rzSalt length must be at least 1.c3NK|]}tjtywN)secretschoice SALT_CHARS)r_s r r zgen_salt..sE!7>>*-Es#%) ValueErrorjoinrange)lengths r gen_saltrs. {:;; 77EuV}E EEc~|jd^}}|j}|j}|dk(r]|sd}d}d}n tt|\}}}d|z|z|z} t j |||||| jd |d|d|fS|d k(r|t|} | d k(r d } t} n5| dk(r |d } t} n$| d k(r|d } t|d} n t dt j| ||| jd| d| fSt d|d#t$r t ddwxYw)N:scryptiz'scrypt' takes 3 arguments.)saltnrpmaxmemzscrypt:pbkdf2rsha256z'pbkdf2' takes 2 arguments.zpbkdf2:zInvalid hash method 'z'.) splitencodemapintrhashlibrhexlenDEFAULT_PBKDF2_ITERATIONS pbkdf2_hmac) methodr!passwordargs salt_bytespassword_bytesr"r#r$r%len_args hash_name iterationss r _hash_internalr:sLL%MFTJ__&N AAA Jc4.1aq1q NNZ1Qv ceaS!AaS !   8 t9 q= I2J ]QI2J ]QIT!WJ:; ;   >:z cei[* .   0;<?TI Js D&&D<cLt|}t|||\}}|d|d|S)aDSecurely hash a password for storage. A password can be compared to a stored hash using :func:`check_password_hash`. The following methods are supported: - ``scrypt``, the default. The parameters are ``n``, ``r``, and ``p``, the default is ``scrypt:32768:8:1``. See :func:`hashlib.scrypt`. - ``pbkdf2``, less secure. The parameters are ``hash_method`` and ``iterations``, the default is ``pbkdf2:sha256:600000``. See :func:`hashlib.pbkdf2_hmac`. Default parameters may be updated to reflect current guidelines, and methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param password: The plaintext password. :param method: The key derivation function and parameters. :param salt_length: The number of characters to generate for the salt. .. versionchanged:: 3.1 The default iterations for pbkdf2 was increased to 1,000,000. .. versionchanged:: 2.3 Scrypt support was added. .. versionchanged:: 2.3 The default iterations for pbkdf2 was increased to 600,000. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. $)rr:)r3r2 salt_lengthr!h actual_methods r generate_password_hashr@Is9D K D%fdH=A}_AdV1QC ((rc |jdd\}}}tjt |||d|S#t$rYywxYw)aASecurely check that the given stored password hash, previously generated using :func:`generate_password_hash`, matches the given password. Methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param pwhash: The hashed password. :param password: The plaintext password. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. r<r(Fr)r)rhmaccompare_digestr:)pwhashr3r2r!hashvals r check_password_hashrFpsU & S! 4g   ~fdHEaH' RR s< AAcZ|sd}|g}|D]dk7rtjtfdtDsFtj j s'jdsdk(sjdry|jtj|S)a2Safely join zero or more untrusted path components to a base directory to avoid escaping the base directory. :param directory: The trusted base directory. :param pathnames: The untrusted path components relative to the base directory. :return: A safe path, otherwise ``None``. .rc3&K|]}|v ywrr)rr filenames r r zsafe_join..s8Cx8srz..z../N) posixpathnormpathanyr ospathisabs startswithappendr) directory pathnamespartsrJs @r safe_joinrVs  KE r> ))(3H 8<8 8ww}}X&""3'4""5) X >>5 !!r)rr,returnstr)r2rXr!rXr3rXrWztuple[str, str])r)r3rXr2rXr=r,rWrX)rDrXr3rXrWbool)rSrXrTrXrWz str | None) __future__rr-rBrNrKrrr0listr rOaltsepr __annotations__rr:r@rFrVrrr r_s"  M %FFBGGNN+ i F-=b?A$)$)$)8;$)$)NS, "r