Name	Size	Mode	Actions
datastructures.cpython-36.pyc	107748	0644	editdlrm
exceptions.cpython-36.pyc	30639	0644	editdlrm
filesystem.cpython-36.pyc	2025	0644	editdlrm
formparser.cpython-36.pyc	13814	0644	editdlrm
http.cpython-36.pyc	37905	0644	editdlrm
local.cpython-36.pyc	22691	0644	editdlrm
routing.cpython-36.pyc	72931	0644	editdlrm
security.cpython-36.pyc	8040	0644	editdlrm
serving.cpython-36.pyc	30478	0644	editdlrm
test.cpython-36.pyc	38961	0644	editdlrm
testapp.cpython-36.pyc	9549	0644	editdlrm
urls.cpython-36.pyc	36414	0644	editdlrm
useragents.cpython-36.pyc	7417	0644	editdlrm
user_agent.cpython-36.pyc	1720	0644	editdlrm
utils.cpython-36.pyc	32960	0644	editdlrm
wsgi.cpython-36.pyc	30102	0644	editdlrm
_internal.cpython-36.pyc	18268	0644	editdlrm
_reloader.cpython-36.pyc	11899	0644	editdlrm
__init__.cpython-36.pyc	310	0644	editdlrm

3 _TBg�� @s�
Udd
lZdd
l
Z
dd
lZdd
lZdd
lZdd
lZdd
lZejr@dZ dZ edd�ejj ejjgD�
�
Zejee d
d
fejeefejeefeejeejejeejfed�dd�Ze d
d
fejeefejeefeejeejejeejfed�d d �Zeeed�dd �Zeed�dd�Zeeeejeefd�dd�Zdeeeed�dd�Zeeed�dd�Zeeejed�dd�Z d
S) �NZ>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789i��c
cs"|]}
|
dk r|
d
kr|
V
qdS)N�
/�)�.0�seprr�5/tmp/pip-build-0s3hx122/Werkzeug/werkzeug/security.py� sr)�data�salt� iterations�keylen�hashfunc�returncCs$tj
d
tdd�
t||
|||�j�S)a�Like :func:`pbkdf2_bin`, but returns a hex-encoded string. :param data: the data to derive. :param salt: the salt for the derivation. :param iterations: the number of iterations. :param keylen: the length of the resulting key. If not provided, the digest size will be used. :param hashfunc: the hash function to use. This can either be the string name of a known hash function, or a function from the hashlib module. Defaults to sha256. .. deprecated:: 2.0 Will be removed in Werkzeug 2.1. Use :func:`hashlib.pbkdf2_hmac` instead. .. versionadded:: 0.9 zj'pbkdf2_hex' is deprecated and will be removed in Werkzeug 2.1. Use 'hashlib.pbkdf2_hmac().hex()' instead.�)
� stacklevel)�warnings�warn�DeprecationWarning� pbkdf2_bin�hex)rr r rrrrr� pbkdf2_hexs 

rcCsjtj
d
tdd�
t|t�r$|jd�
}t|
t�r8|
jd�
}
|sBd}nt|�
rT|�j}n|}tj |||
||�S)aeReturns a binary digest for the PBKDF2 hash algorithm of `data` with the given `salt`. It iterates `iterations` times and produces a key of `keylen` bytes. By default, SHA-256 is used as hash function; a different hashlib `hashfunc` can be provided. :param data: the data to derive. :param salt: the salt for the derivation. :param iterations: the number of iterations. :param keylen: the length of the resulting key. If not provided the digest size will be used. :param hashfunc: the hash function to use. This can either be the string name of a known hash function or a function from the hashlib module. Defaults to sha256. .. deprecated:: 2.0 Will be removed in Werkzeug 2.1. Use :func:`hashlib.pbkdf2_hmac` instead. .. versionadded:: 0.9 zd'pbkdf2_bin' is deprecated and will be removed in Werkzeug 2.1. Use 'hashlib.pbkdf2_hmac()' instead.r)
r�utf8�sha256) rrr� isinstance�str�encode�callable�name�hashlib�pbkdf2_hmac)rr r rr� hash_namerrrr5s






r)�
a�
br cCsDtj
d
tdd�
t|t�r$|jd�
}t|
t�r8|
jd�
}
tj||
�S)ai
This function compares strings in somewhat constant time. This requires that the length of at least one string is known in advance. Returns `True` if the two strings are equal, or `False` if they are not. .. deprecated:: 2.0 Will be removed in Werkzeug 2.1. Use :func:`hmac.compare_digest` instead. .. versionadded:: 0.7 zd'safe_str_cmp' is deprecated and will be removed in Werkzeug 2.1. Use 'hmac.compare_digest' instead.r)
rzutf-8)rrrrrr�hmac�compare_digest)r r!rrr�safe_str_cmpgs



r$)�lengthr c

Cs(|d
k
rtd�
�
dj
dd�t|�
D�
�
S)zAGenerate a random string of SALT_CHARS with specified ``length``.r
zSalt length must be positive�c
ss|]}
tj
t�
V
qdS)
N)�secrets�choice� SALT_CHARS)r�
_rrrr�szgen_salt..)� ValueError�join�range)
r%rrr�gen_salt�s
r.)�methodr �passwordr cCs�|d
kr||fS|
jd�
}
|jd�
}|j
d�
r�|
s:td�
�
|dd�jd�
}t|�
dkr`td �
�
|jd�
}|r~t|dpzd�
nt}tj |||
|�j �d|�d|��fS|
r�tj|
||�j �|fStj||�j �|fS) z�Internal password hash helper. Supports plaintext without salt, unsalted and salted passwords. In case salted passwords are used hmac is used. �plainzutf-8zpbkdf2:zSalt is required for PBKDF2�N�
:�
rz&Invalid number of arguments for PBKDF2r
)r4r)r� startswithr+�split�len�pop�int�DEFAULT_PBKDF2_ITERATIONSrrrr"�new� hexdigest)r/r r0�argsr rrr�_hash_internal�s"







r>� pbkdf2:sha256�)r0r/�salt_lengthr cCs8|
d
krt|�
nd}t
|
||�\}}|�d|�d|��S)a�Hash a password with the given method and salt with a string of the given length. The format of the string returned includes the method that was used so that :func:`check_password_hash` can check the hash. The format for the hashed string looks like this:: method$salt$hash This method can **not** generate unsalted passwords but it is possible to set param method='plain' in order to enforce plaintext passwords. If a salt is used, hmac is used internally to salt the password. If PBKDF2 is wanted it can be enabled by setting the method to ``pbkdf2:method:iterations`` where iterations is optional:: pbkdf2:sha256:80000$salt$hash pbkdf2:sha256$salt$hash :param password: the password to hash. :param method: the hash method to use (one that hashlib supports). Can optionally be in the format ``pbkdf2:method:iterations`` to enable PBKDF2. :param salt_length: the length of the salt in letters. r1r&�
$)r.r>)r0r/rAr �
hZ actual_methodrrr�generate_password_hash�s

rD)�pwhashr0r cCs<|jd
�
dkrdS|j
d
d�\}}}tjt|||
�d|�S)a�
Check a password against a given salted and hashed password value. In order to support unsalted legacy passwords this method supports plain text passwords, md5 and sha1 hashes (both salted and unsalted). Returns `True` if the password matched, `False` otherwise. :param pwhash: a hashed string like returned by :func:`generate_password_hash`. :param password: the plaintext password to compare against the hash. rBrFr
)�countr6r"r#r>)rEr0r/r Zhashvalrrr�check_password_hash�s

rG)� directory� pathnamesr c
sr|g
}x`|
D]X��d
kr"tj
��
�t�f
dd�tD�
�
sVtjj��
sV�dksV�jd�
rZdS|j��

qWtj |�S)a2
Safely join zero or more untrusted path components to a base directory to avoid escaping the base directory. :param directory: The trusted base directory. :param pathnames: The untrusted path components relative to the base directory. :return: A safe path, otherwise ``None``. r&c
3s|]}
|
�kV
qdS)
Nr)rr)
�filenamerrr�szsafe_join..z..z../N) � posixpath�normpath�any�_os_alt_seps�os�path�isabsr5�appendr,)rHrI�partsr)
rJr� safe_join�s 




rT)r?r@)!rr"rOrKr'Ztyping�
trZ TYPE_CHECKINGr)r:�listrPr�altseprNZListr�Union�bytesr9�Optional�Callablerr�boolr$r.ZTupler>rDrGrTrrrr�
s6







&

:


:
,"