67 lines
5.6 KiB
Plaintext
67 lines
5.6 KiB
Plaintext
|
B
|
|||
|
|
<00>/<2F>]<5D> <00> @ s<> d dl Z d dlZddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddl m
|
|||
|
|
Z
|
|||
|
|
G d d
|
|||
|
|
<EFBFBD> d
|
|||
|
|
e <0B>Z G d d <0C> d e <0C>Z
G d
d<0E> de <0C>ZG dd<10> de <0B>ZdS )<11> N<> )<01>constant_time_compare)<01>_base64_alphabet)<01>
base64_decode)<01>
base64_encode)<01>
|
|||
|
|
want_bytes)<01> BadSignaturec @ s e Zd ZdZdd<03> Zdd<05> ZdS )<07>SigningAlgorithmzgSubclasses must implement :meth:`get_signature` to provide
|
|||
|
|
signature generation functionality.
|
|||
|
|
c C s
|
|||
|
|
t <00> <00>dS )z2Returns the signature for the given key and value.N)<01>NotImplementedError)<03>self<6C>key<65>value<75> r <00>=/tmp/pip-install-c3kgu56x/itsdangerous/itsdangerous/signer.py<70>
get_signature s z SigningAlgorithm.get_signaturec C s t || <00>||<02><02>S )zMVerifies the given signature matches the expected
|
|||
|
|
signature.
|
|||
|
|
)r r )r r r
<00>sigr r r <00>verify_signature s z!SigningAlgorithm.verify_signatureN)<06>__name__<5F>
|
|||
|
|
__module__<EFBFBD> __qualname__<5F>__doc__r r r r r r r s r c @ s e Zd ZdZdd<03> ZdS )<05>
NoneAlgorithmz`Provides an algorithm that does not perform any signing and
|
|||
|
|
returns an empty signature.
|
|||
|
|
c C s dS )N<> r )r r r
r r r r ! s zNoneAlgorithm.get_signatureN)r r r r r r r r r r s r c @ s, e Zd ZdZeej<06>Zddd<04>Zdd<06> Z dS )<08>
HMACAlgorithmz*Provides signature generation using HMACs.Nc C s |d kr| j }|| _d S )N)<02>default_digest_method<6F>
digest_method)r r r r r <00>__init__- s zHMACAlgorithm.__init__c C s t j||| jd<01>}|<03><03> S )N)<02>msg<73> digestmod)<04>hmac<61>newr <00>digest)r r r
<00>macr r r r 2 s zHMACAlgorithm.get_signature)N)
|
|||
|
|
r r r r <00> staticmethod<6F>hashlib<69>sha1r r r r r r r r % s
|
|||
|
|
|
|||
|
|
r c @ sX e Zd ZdZeej<06>ZdZddd<06>Z dd<08> Z
|
|||
|
|
d d
|
|||
|
|
<EFBFBD> Z d d <0C> Z d
d<0E> Z
dd<10> Zdd<12> ZdS )<14>Signera<72> This class can sign and unsign bytes, validating the signature
|
|||
|
|
provided.
|
|||
|
|
|
|||
|
|
Salt can be used to namespace the hash, so that a signed string is
|
|||
|
|
only valid for a given namespace. Leaving this at the default value
|
|||
|
|
or re-using a salt value across different parts of your application
|
|||
|
|
where the same signed value in one part can mean something different
|
|||
|
|
in another part is a security risk.
|
|||
|
|
|
|||
|
|
See :ref:`the-salt` for an example of what the salt is doing and how
|
|||
|
|
you can utilize it.
|
|||
|
|
|
|||
|
|
.. versionadded:: 0.14
|
|||
|
|
``key_derivation`` and ``digest_method`` were added as arguments
|
|||
|
|
to the class constructor.
|
|||
|
|
|
|||
|
|
.. versionadded:: 0.18
|
|||
|
|
``algorithm`` was added as an argument to the class constructor.
|
|||
|
|
z
django-concatN<74>.c C s| t |<01>| _t |<03>| _| jtkr&td<01><01>|d kr2dn|| _|d krF| j}|| _|d krZ| j}|| _ |d krrt
|
|||
|
|
| j <09>}|| _ d S )Nz<4E>The given separator cannot be used because it may be contained in the signature itself. Alphanumeric characters and `-_=` must not be used.zitsdangerous.Signer) r <00>
|
|||
|
|
secret_key<EFBFBD>sepr <00>
|
|||
|
|
ValueError<EFBFBD>salt<6C>default_key_derivation<6F>key_derivationr r r <00> algorithm)r r( r+ r) r- r r. r r r r [ s
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
zSigner.__init__c C s<> t | j<01>}| jdkr(| <00>|| j <00><01><05> S | jdkrJ| <00>|d | j <00><01><05> S | jdkrxtj| j| jd<05>}|<02>|<01> |<02><05> S | jdkr<>| jS t d<07><01>dS ) a+ This method is called to derive the key. The default key
|
|||
|
|
derivation choices can be overridden here. Key derivation is not
|
|||
|
|
intended to be used as a security method to make a complex key
|
|||
|
|
out of a short password. Instead you should use large random
|
|||
|
|
secret keys.
|
|||
|
|
<20>concatz
django-concats signerr )r <00>nonez Unknown key derivation methodN)
|
|||
|
|
r r+ r- r r( r! r r <00>update<74> TypeError)r r+ r" r r r <00>
|
|||
|
|
derive_keyw s
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
zSigner.derive_keyc C s& t |<01>}| <00><01> }| j<02>||<01>}t|<03>S )z*Returns the signature for the given value.)r r3 r. r r )r r
r r r r r r <00> s zSigner.get_signaturec C s t |<01>t | j<01> | <00>|<01> S )zSigns the given string.)r r) r )r r
r r r <00>sign<67> s z Signer.signc C s: | <00> <00> }y t|<02>}W n tk
|
|||
|
|
r( dS X | j<03>|||<02>S )z+Verifies the signature for the given value.F)r3 r <00> Exceptionr. r )r r
r r r r r r <00> s zSigner.verify_signaturec C s\ t |<01>}t | j<01>}||kr(td| j <00><01>|<01>|d<02>\}}| <00>||<04>rH|S td| |d<04><02>dS )zUnsigns the given string.zNo %r found in valuer zSignature %r does not match)<01>payloadN)r r) r <00>rsplitr )r <00> signed_valuer) r
r r r r <00>unsign<67> s
|
|||
|
|
z
Signer.unsignc C s( y| <00> |<01> dS tk
|
|||
|
|
r" dS X dS )znOnly validates the given signed value. Returns ``True`` if
|
|||
|
|
the signature exists and is valid.
|
|||
|
|
TFN)r9 r )r r8 r r r <00>validate<74> s
|
|||
|
|
|
|||
|
|
zSigner.validate)Nr' NNN)r r r r r# r$ r% r r, r r3 r r4 r r9 r: r r r r r& 7 s
|
|||
|
|
|
|||
|
|
r& )r$ r <00>_compatr <00>encodingr r r r <00>excr <00>objectr r r r& r r r r <00><module> s
|