+ )jz%nRt^RIt^RIt^RIt^RIt^RIt^RIHt^RIH t H t ^RI H t ^RI Ht^RIHt]!R4tRt!R R ]4t!R R ]4tR tRtRtRtR$RltRtR%RltR%RltRRRR/RltR&Rlt!RR4t RR] R3Rlt!RR] RR3Rlt"!R R!4t#!R"R#]#4t$R#)'a_ Functions for creating and restoring url-safe signed JSON objects. The format used looks like this: >>> signing.dumps("hello") 'ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv422nZA4sgmk' There are two components here, separated by a ':'. The first component is a URLsafe base64 encoded JSON of the object passed to dumps(). The second component is a base64 encoded hmac/SHA-256 hash of "$first_component:$secret" signing.loads(s) checks the signature and returns the deserialized object. If the signature fails, a BadSignature exception is raised. >>> signing.loads("ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv422nZA4sgmk") 'hello' >>> signing.loads("ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv42-modified") ... BadSignature: Signature "ImhlbGxvIg:1QaUZC:YIye-ze3TTx7gtSv42-modified" does not match You can optionally compress the JSON prior to base64 encoding it to save space, using the compress=True argument. This checks if compression actually helps and only applies compression if the result is a shorter string: >>> signing.dumps(list(range(1, 20)), compress=True) '.eJwFwcERACAIwLCF-rCiILN47r-GyZVJsNgkxaFxoDgxcOHGxMKD_T7vhAml:1QaUaL:BA0thEZrp4FQVXIXuOvYJtLJSrQ' The fact that the string is compressed is signalled by the prefixed '.' at the start of the base64 JSON. There are 65 url-safe characters: the 64 used by url-safe base64 and the ':'. These functions make use of all of them. N)settings)constant_time_compare salted_hmac force_bytes) import_string)_lazy_re_compilez^[A-z0-9-_=]*$>0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzc]tRt^4tRtRtR#) BadSignaturezSignature does not match.N__name__ __module__ __qualname____firstlineno____doc____static_attributes__r L/var/www/eggtrainer/venv/lib/python3.14/site-packages/django/core/signing.pyr r 4s#rr c]tRt^:tRtRtR#)SignatureExpiredz3Signature timestamp is older than required max_age.r Nr r rrrr:s=rrcV^8XdR#V^8dRMRp\V4pRpV^8d%\V^>4wr\V,V,pK+W,#)0-)absdivmodBASE62_ALPHABET)ssignencoded remainders& r b62_encoder$@sRAva%3RD AAG a%a} !),w6 >rcVR8Xd^#^pV^,R8Xd VR,pRp^pVF&pV^>,\PV4,pK( W,#)rrNN)rindex)r r!decodeddigits& r b62_decoder,LsZCx Dts{ bEGB,!6!6u!== >rcL\P!V4PR4#=)base64urlsafe_b64encodestrip)r s&r b64_encoder3Ys  # #A & , ,T 22rcnR\V4)^,,p\P!W,4#r.)lenr0urlsafe_b64decode)r pads& r b64_decoder8]s) 3q6'A+ C  # #AG ,,rc f\\WW#R7P44P4#) algorithm)r3rdigestdecode)saltvaluekeyr;s&&&&r base64_hmacrAbs) D:AAC  fhrc&R\V4,#)sdjango.http.cookiesr)r@s&r_cookie_signer_keyrChs !K$4 44rrc(R\V4 RV V 2#)zdjango.http.cookies.v2::)r5 cookie_namer>s&&r_cookie_signer_saltrHms $SYKq{m DDrcW,#Nr rFs&&r_cookie_signer_legacy_saltrKrs  rr>max_agec"\\W4R7PWR7# \d]p\P 'dA\ T\4'g+\\Y4R7PYR7uRp?#hRp?ii;i))r>)rLN) get_cookie_signerrHunsignr r"SIGNED_COOKIE_LEGACY_SALT_FALLBACK isinstancerrK) signed_valuerGr>rLexcs&$$$ r_unsign_cookierTvs  &9+&LMTT U     6 6 6z !@ @ %/ Bf\f3 4 s!$' BAB BB  Bc\\P4pV!\\P4\ \\P 4VR7#))r@ fallback_keysr>)rrSIGNING_BACKENDrC SECRET_KEYmapSECRET_KEY_FALLBACKS)r>Signers& rrNrNsA 833 4F  x22 3,h.K.KL  rc0a]tRt^toRtRtRtRtVtR#)JSONSerializerzK Simple wrapper around json to be used in signing.dumps and signing.loads. cP\P!VRR7PR4#),) separatorslatin-1)r_rE)jsondumpsencode)selfobjs&&rrcJSONSerializer.dumpsszz#*5<) serializercompress)TimestampSigner sign_object)rfr@r>rprqs&&&&&rrcrcs&& s . : : X ; rc@\WVR7PVVVR7#)zp Reverse of dumps(), raise BadSignature if signature fails. The serializer is expected to accept a bytestring. )r@r>rV)rprL)rr unsign_object)r r@r>rprLrVs&&&&&&rriris.  - m rc na]tRt^toRRRRRRRRRR/RltRR ltR tR t]R 3R lt ]3Rlt Rt Vt R#)r[r@NseprEr>r;rVcT;'g\PVnVeTM\PVnW nT;'g2VP P: RVP P: 2Vn T;'gRVn \PVP 4'd\RV,4hR#)N.sha256zJUnsafe Signer separator: %r (cannot be empty or consist of only A-z0-9-_=))rrXr@rZrVrw __class__rrr>r; _SEP_UNSAFEmatch ValueError)rer@rwr>r;rVs&$$$$$r__init__Signer.__init__s--(--( ..    NN % % NN # #  #..h   TXX & &"$'(  'rcT;'g VPp\VPR,WVPR7#)signerr:)r@rAr>r;)rer?r@s&&&r signatureSigner.signatures-ooTXX499x/t~~VVrcJV: VP: VPV4: 2#rJ)rwr)rer?s&&rr! Signer.signs $((DNN5,ABBrcDVPV9d\RVP,4hVPVP^4wr#VP.VPOF'p\ W0P W$44'gK%Vu# \RV,4h)zNo "%s" found in valuezSignature "%s" does not match)rwr rsplitr@rVrr)rerRr?sigr@s&& rrO Signer.unsigns 88< '7$((BC C!((15 HH2t112C$S..*DEE 3:S@AArFc ,V!4PV4pRpV'd;\P!V4p\V4\V4^, 8dTpRp\ V4P 4pV'd RV,pVP V4#)a5 Return URL-safe, hmac signed base64 compressed JSON string. If compress is True (not the default), check if compressing using zlib can save some space. Prepend a '.' to signify compression. This is included in the signature, to protect against zip bombs. The serializer is expected to return a bytestring. FTry)rczlibrqr5r3r=r!)rerfrprqrj is_compressed compressedbase64ds&&&& rrsSigner.sign_objectsx|!!#& t,J:#d)a-0! $ T"))+ GmGyy!!rc VP!V3/VBP4pVR,R8HpV'd VR,p\V4pV'd\P!V4pV!4P V4#):Nr'N.r&)rOrdr8r decompressri)re signed_objrpkwargsrrrjs&&&, rruSigner.unsign_objectsh++j3F3::<R[D( bkG'" ??4(D|!!$''r)r;rVr@r>rwrJ) rrrrrrr!rOr]rsrurrlrms@rr[r[s`")-9=MQ*WCB+95"24B ( (rr[cHaa]tRtRtoRtV3RltRV3RlltRtVtV;t #)rricP\\\P!444#rJ)r$inttime)res&r timestampTimestampSigner.timestamps#diik*++rch<V: VP: VP4: 2p\SV` V4#rJ)rwrsuperr!)rer?r{s&&rr!TimestampSigner.signs)!488T^^-=>w|E""rc L<\SV`V4pVPVP^4wr\ V4pVeg\ V\ P4'dVP4p\P!4V, pWR8d\RV: RV: R24hV#)zS Retrieve original value and check it wasn't signed more than max_age seconds ago. zSignature age z > z seconds) rrOrrwr,rQdatetime timedelta total_secondsrr)rer?rLresultrager{s&&& rrOTimestampSigner.unsigns &!==15y)  '8#5#566!//1))+ )C}&#w'WXX rr rJ) rrrrrr!rOrrl __classcell__)r{rns@@rrrrrs,#rrr)sha1)r)z%django.core.signing.get_cookie_signer)%rr0rrbrr django.confrdjango.utils.cryptorrdjango.utils.encodingrdjango.utils.module_loadingrdjango.utils.regex_helperrr|r Exceptionr rr$r,r3r8rArCrHrKrTrNr]rcrir[rrr rrrs!F B-5601 R 9  |  3-  5 E  b $  2 2-.SX4   ,J(J(Zfr