o h.@sddlZddlmZddlmZddlmZmZmZddl m Z ddl m Z ddl mZmZddlmZdd lmZdd lmZdd lmZdd lmZmZdd lmZddZddZGdddeZGdddeZ GdddZ!Gddde!Z"dS)N)partial)urlsplit)iscoroutinefunctionmarkcoroutinefunction sync_to_async)settings)auth)REDIRECT_FIELD_NAME load_backend)RemoteUserBackend)redirect_to_login)ImproperlyConfigured) resolve_url)MiddlewareMixinRemovedInDjango61Warning)SimpleLazyObjectcCst|ds t||_|jS)N _cached_user)hasattrrget_userrrequestr^/var/www/html/premium_crap/venv/lib/python3.10/site-packages/django/contrib/auth/middleware.pyrs  rcs$t|dst|IdH|_|jS)N _acached_user)rr aget_userrrrrrausers rc@seZdZddZdS)AuthenticationMiddlewarecs4tds tdtfdd_tt_dS)NsessionzThe Django authentication middleware requires session middleware to be installed. Edit your MIDDLEWARE setting to insert 'django.contrib.sessions.middleware.SessionMiddleware' before 'django.contrib.auth.middleware.AuthenticationMiddleware'.cstSN)rrrrr(sz:AuthenticationMiddleware.process_request..)rr ruserrrselfrrrrprocess_requests z(AuthenticationMiddleware.process_requestN)__name__ __module__ __qualname__r#rrrrrs rc@s4eZdZdZeZddZddZddZdd Z d S) LoginRequiredMiddlewarez Middleware that redirects all unauthenticated requests to a login page. Views using the login_not_required decorator will not be redirected. cCs(|jjrdSt|ddsdS|||S)Nlogin_requiredT)r is_authenticatedgetattrhandle_no_permission)r"r view_func view_args view_kwargsrrr process_view5s   z$LoginRequiredMiddleware.process_viewcCs&t|ddptj}|stdt|S)N login_urlzNo login URL to redirect to. Define settings.LOGIN_URL or provide a login_url via the 'django.contrib.auth.decorators.login_required' decorator.)r*r LOGIN_URLr str)r"r,r0rrr get_login_url>s z%LoginRequiredMiddleware.get_login_urlcCst|d|jS)Nredirect_field_name)r*r4)r"r,rrrget_redirect_field_nameHsz/LoginRequiredMiddleware.get_redirect_field_namec Csp|}t||}t|dd\}}t|dd\}}|r%||kr/|r+||kr/|}t||||S)N)build_absolute_urirr3r get_full_pathr r5) r"rr,pathresolved_login_url login_scheme login_netloccurrent_schemecurrent_netlocrrrr+Ks z,LoginRequiredMiddleware.handle_no_permissionN) r$r%r&__doc__r r4r/r3r5r+rrrrr',s  r'csheZdZdZdZdZfddZdZdZddZ dd Z d d Z d d Z ddZ ddZddZZS)RemoteUserMiddlewarea Middleware for utilizing web-server-provided authentication. If request.user is not authenticated, then this middleware attempts to authenticate the username from the ``REMOTE_USER`` key in ``request.META``, an environment variable commonly set by the webserver. If authentication is successful, the user is automatically logged in to persist the user in the session. The ``request.META`` key is configurable and defaults to ``REMOTE_USER``. Subclass this class and change the ``header`` attribute if you need to use a different key from ``request.META``, for example a HTTP request header. Tcs<|durtd||_t||_|jrt|tdS)Nzget_response must be provided.) ValueError get_responseris_asyncrsuper__init__)r"rB __class__rrrErs zRemoteUserMiddleware.__init__ REMOTE_USERcCs$|jr||S||||Sr)rC __acall__r#rBr!rrr__call__s   zRemoteUserMiddleware.__call__cCst|ds tdz|j|j}Wnty'|jr$|jjr$||YdSw|jjr>|j | ||kr9dS||t j ||d}|rR||_t ||dSdS)Nr The Django remote user auth middleware requires the authentication middleware to be installed. Edit your MIDDLEWARE setting to insert 'django.contrib.auth.middleware.AuthenticationMiddleware' before the RemoteUserMiddleware class. remote_user)rr METAheaderKeyErrorforce_logout_if_no_headerr r)_remove_invalid_user get_usernameclean_usernamer authenticateloginr"rusernamer rrrr#s(     z$RemoteUserMiddleware.process_requestcsv|jjtjur+|jjtjur+tjdtddt|jdd|IdH||IdHS||IdH||IdHS)NzSupport for subclasses of RemoteUserMiddleware that override process_request() without overriding aprocess_request() is deprecated.r6)category stacklevelT)thread_sensitive) rGr#r@aprocess_requestwarningswarnrrrBr!rrrrIszRemoteUserMiddleware.__acall__cst|ds tdz |jd|j}Wnty3|jr0|IdH}|jr0||IdHYdSw|IdH}|jrR| | ||krJdS||IdHt j ||dIdH}|rl||_ t ||IdHdSdS)Nr rKHTTP_rL)rr rNrOrPrQrr)_aremove_invalid_userrSrTr aauthenticater aloginrWrrrr\s0   z%RemoteUserMiddleware.aprocess_requestcCs<|jtj}t|}z||}W|StyY|Sw)zr Allow the backend to clean the username, if the backend defines a clean_username method. )rrBACKEND_SESSION_KEYr rTAttributeError)r"rXr backend_strbackendrrrrTs    z#RemoteUserMiddleware.clean_usernamecCsTz t|jtjd}Wntyt|YdSwt|tr(t|dSdSz Remove the current authenticated user in the request which is invalid but only if the user is authenticated via the RemoteUserBackend. N) r rgetrrc ImportErrorlogout isinstancer r"rstored_backendrrrrRs  z)RemoteUserMiddleware._remove_invalid_usercshzt|jtjdIdH}Wnty"t|IdHYdSwt|tr2t|IdHdSdSrg) r ragetrrcrjalogoutrlr rmrrrr`s  z*RemoteUserMiddleware._aremove_invalid_user)r$r%r&r? sync_capable async_capablerErOrQrJr#rIr\rTrRr` __classcell__rrrFrr@^s  '* r@c@seZdZdZdZdS)PersistentRemoteUserMiddlewarea Middleware for web-server provided authentication on logon pages. Like RemoteUserMiddleware but keeps the user authenticated even if the ``request.META`` key is not found in the request. Useful for setups when the external authentication is only expected to happen on some "logon" URL and the rest of the application wants to use Django's authentication mechanism. FN)r$r%r&r?rQrrrrrts rt)#r] functoolsr urllib.parser asgiref.syncrrr django.confrdjango.contribrdjango.contrib.authr r django.contrib.auth.backendsr django.contrib.auth.viewsr django.core.exceptionsr django.shortcutsrdjango.utils.deprecationrrdjango.utils.functionalrrrrr'r@rtrrrrs(         2;