o q>e@sUddlmZddlZddlZddlZddlZddlZdZdZe ddej ej j fDZ ded<d#d dZd$ddZ d%d&ddZd'ddZd(d!d"ZdS))) annotationsN>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789i' ccs$|] }|dur|dkr|VqdS)N/.0seprrR/var/www/bmteknikk.ddns.net/venv/lib/python3.10/site-packages/werkzeug/security.py sr z list[str] _os_alt_sepslengthintreturnstrcCs(|dkrtddddt|DS)zAGenerate a random string of SALT_CHARS with specified ``length``.rzSalt length must be at least 1.css|]}ttVqdSN)secretschoice SALT_CHARS)r_rrr r szgen_salt..) ValueErrorjoinrange)r rrr gen_saltsrmethodsaltpasswordtuple[str, str]c Cs<|d^}}|d}|d}|dkrU|sd}d}d}nz tt|\}}}Wn ty4tddwd|||}tj||||||d d |d|d|fS|d krt|}|d krfd } t } n|dkrq|d } t } n|dkr|d } t|d} ntdt | ||| d| d| fStd|d)N:zutf-8scryptiz'scrypt' takes 3 arguments.)rnrpmaxmemzscrypt:pbkdf2rsha256z'pbkdf2' takes 2 arguments.zpbkdf2:zInvalid hash method 'z'.) splitencodemapr rhashlibrhexlenDEFAULT_PBKDF2_ITERATIONS pbkdf2_hmac) rrrargsr#r$r%r&len_args hash_name iterationsrrr _hash_internalsB    r6r salt_lengthcCs,t|}t|||\}}|d|d|S)aSecurely hash a password for storage. A password can be compared to a stored hash using :func:`check_password_hash`. The following methods are supported: - ``scrypt``, the default. The parameters are ``n``, ``r``, and ``p``, the default is ``scrypt:32768:8:1``. See :func:`hashlib.scrypt`. - ``pbkdf2``, less secure. The parameters are ``hash_method`` and ``iterations``, the default is ``pbkdf2:sha256:600000``. See :func:`hashlib.pbkdf2_hmac`. Default parameters may be updated to reflect current guidelines, and methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param password: The plaintext password. :param method: The key derivation function and parameters. :param salt_length: The number of characters to generate for the salt. .. versionchanged:: 2.3 Scrypt support was added. .. versionchanged:: 2.3 The default iterations for pbkdf2 was increased to 600,000. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. $)rr6)rrr8rh actual_methodrrr generate_password_hashEsr<pwhashboolcCsDz |dd\}}}Wn tyYdSwtt|||d|S)aASecurely check that the given stored password hash, previously generated using :func:`generate_password_hash`, matches the given password. Methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param pwhash: The hashed password. :param password: The plaintext password. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. r9r)Fr)r*rhmaccompare_digestr6)r=rrrhashvalrrr check_password_hashis  rB directory pathnames str | Nonecsx|sd}|g}|D]-dkrttfddtDs.tjs.dks.dr1dS|q tj |S)a2Safely join zero or more untrusted path components to a base directory to avoid escaping the base directory. :param directory: The trusted base directory. :param pathnames: The untrusted path components relative to the base directory. :return: A safe path, otherwise ``None``. .rc3s|]}|vVqdSrrrfilenamerr r szsafe_join..z..z../N) posixpathnormpathanyr ospathisabs startswithappendr)rCrDpartsrrGr safe_joins      rR)r r rr)rrrrrrrr)rr7)rrrrr8r rr)r=rrrrr>)rCrrDrrrE) __future__rr-r?rLrIrrr0listrrMaltsepr __annotations__rr6r<rBrRrrrr s"   - $