o g@sUddlmZddlZddlZddlZddlZddlZdZdZe ddej ej j fDZ ded<d#d dZd$ddZ d%d&ddZd'ddZd(d!d"ZdS))) annotationsN>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789i@Bccs$|] }|dur|dkr|VqdS)N/.0seprrM/var/www/html/flaskapp/venv/lib/python3.10/site-packages/werkzeug/security.py sr z list[str] _os_alt_sepslengthintreturnstrcCs(|dkrtddddt|DS)zAGenerate a random string of SALT_CHARS with specified ``length``.rzSalt length must be at least 1.css|]}ttVqdSN)secretschoice SALT_CHARS)r_rrr r szgen_salt..) ValueErrorjoinrange)r rrr gen_saltsrmethodsaltpasswordtuple[str, str]c Cs8|d^}}|}|}|dkrS|sd}d}d}nz tt|\}}}Wn ty2tddwd|||} tj|||||| dd |d|d|fS|d krt|} | d krdd } t } n| dkro|d } t } n| d kr~|d } t|d} ntdt | ||| d| d| fStd|d)N:scryptiz'scrypt' takes 3 arguments.)rnrpmaxmemzscrypt:pbkdf2rsha256z'pbkdf2' takes 2 arguments.zpbkdf2:zInvalid hash method 'z'.) splitencodemapr rhashlibrhexlenDEFAULT_PBKDF2_ITERATIONS pbkdf2_hmac) rrrargs salt_bytespassword_bytesr#r$r%r&len_args hash_name iterationsrrr _hash_internalsN   r8r salt_lengthcCs,t|}t|||\}}|d|d|S)aDSecurely hash a password for storage. A password can be compared to a stored hash using :func:`check_password_hash`. The following methods are supported: - ``scrypt``, the default. The parameters are ``n``, ``r``, and ``p``, the default is ``scrypt:32768:8:1``. See :func:`hashlib.scrypt`. - ``pbkdf2``, less secure. The parameters are ``hash_method`` and ``iterations``, the default is ``pbkdf2:sha256:600000``. See :func:`hashlib.pbkdf2_hmac`. Default parameters may be updated to reflect current guidelines, and methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param password: The plaintext password. :param method: The key derivation function and parameters. :param salt_length: The number of characters to generate for the salt. .. versionchanged:: 3.1 The default iterations for pbkdf2 was increased to 1,000,000. .. versionchanged:: 2.3 Scrypt support was added. .. versionchanged:: 2.3 The default iterations for pbkdf2 was increased to 600,000. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. $)rr8)rrr:rh actual_methodrrr generate_password_hashIs"r>pwhashboolcCsDz |dd\}}}Wn tyYdSwtt|||d|S)aASecurely check that the given stored password hash, previously generated using :func:`generate_password_hash`, matches the given password. Methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param pwhash: The hashed password. :param password: The plaintext password. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. r;r)Fr)r*rhmaccompare_digestr8)r?rrrhashvalrrr check_password_hashps  rD directory pathnames str | Nonecs|sd}|g}|D]2dkrttfddtDs3tjs3ds3dks3dr6dS|q tj |S) a2Safely join zero or more untrusted path components to a base directory to avoid escaping the base directory. :param directory: The trusted base directory. :param pathnames: The untrusted path components relative to the base directory. :return: A safe path, otherwise ``None``. .rc3s|]}|vVqdSrrrfilenamerr r szsafe_join..rz..z../N) posixpathnormpathanyr ospathisabs startswithappendr)rErFpartsrrIr safe_joins$     rT)r r rr)rrrrrrrr)rr9)rrrrr:r rr)r?rrrrr@)rErrFrrrG) __future__rr-rArNrKrrr0listrrOaltsepr __annotations__rr8r>rDrTrrrr s"   1 '