+ Sj`^RIHt^RIHt^RIHtHt^RIHtHt!RR4t ] !4t R#))datetime)settings)constant_time_compare salted_hmac) base36_to_int int_to_base36ca]tRt^toRtRtRtRtRtRt Rt Rt ] !] ] 4t RtRt] !]]4tR tR tR tR tR tRtRtVtR#)PasswordResetTokenGeneratorzU Strategy object used to generate and check tokens for the password reset mechanism. z6django.contrib.auth.tokens.PasswordResetTokenGeneratorNc<VP;'gRVnR#)sha256N) algorithmselfs&O/var/www/idalgo/venv/lib/python3.14/site-packages/django/contrib/auth/tokens.py__init__$PasswordResetTokenGenerator.__init__s338cJVP;'g\P#N)_secretr SECRET_KEYrs&r _get_secret'PasswordResetTokenGenerator._get_secrets||22x222rcWnR#r)r)rsecrets&&r _set_secret'PasswordResetTokenGenerator._set_secrets rcVVPf\P#VP#r)_secret_fallbacksrSECRET_KEY_FALLBACKSrs&r_get_fallbacks*PasswordResetTokenGenerator._get_fallbackss&  ! ! )00 0%%%rcWnR#r)r)r fallbackss&&r_set_fallbacks*PasswordResetTokenGenerator._set_fallbacks#s!*rc vVPVVPVP44VP4#)zQ Return a token that can be used once to do a password reset for the given user. )_make_token_with_timestamp _num_seconds_nowr)rusers&&r make_token&PasswordResetTokenGenerator.make_token(s5 ..    diik * KK  rc V'd V'gR#VPR4wr4\T4pTP.TPOF'p\ TP YT4T4'gK'M R#TPTP44T, \P8dR#R# \dR#i;i \dR#i;i)z@ Check that a password reset token is correct for a given user. F-T) split ValueErrorrrsecret_fallbacksrr(r)r*rPASSWORD_RESET_TIMEOUT)rr+tokents_b36_tsrs&&& r check_token'PasswordResetTokenGenerator.check_token3s  C(IF v&B {{;T%:%:;F$//&A <   diik *R /83R3R R-     s"B6 C6 CC CCc\V4p\VPVPW4VVPR7P 4R,pV: RV: 2#))rr :NNr/)rrkey_salt_make_hash_valuer hexdigest)rr+ timestamprr5 hash_strings&&&& rr(6PasswordResetTokenGenerator._make_token_with_timestampTsUy)! MM  ! !$ 2nn  )+   !+..rc VPfRMVPP^RR7pVP4p\WR4;'gRpVP VP V V V 2#)ab Hash the user's primary key, email (if available), and some user state that's sure to change after a password reset to produce a token that is invalidated when it's used: 1. The password field will change upon a password reset (even if the same password is chosen, due to password salting). 2. The last_login field will usually be updated very shortly after a password reset. Failing those things, settings.PASSWORD_RESET_TIMEOUT eventually invalidates the token. Running this data through salted_hmac() prevents password cracking attempts using the reset token, provided the secret isn't compromised. N) microsecondtzinfo) last_loginreplaceget_email_field_namegetattrpkpassword)rr+r?login_timestamp email_fieldemails&&& rr=,PasswordResetTokenGenerator._make_hash_valuebsw&& ((Qt(D  //1 2.44"''4==//):9+eWMMrcX\V\R^^4, P44#)i)intr total_seconds)rdts&&rr)(PasswordResetTokenGenerator._num_seconds|s$B$1--<<>??rc,\P!4#r)rnowrs&rr* PasswordResetTokenGenerator._nows||~r)rrr )__name__ __module__ __qualname____firstlineno____doc__r<r rrrrrpropertyrr!r%r2r,r8r(r=r)r*__static_attributes____classdictcell__) __classdict__s@rr r s~ HHIG43k; /F& + ?  B /N4@rr N) r django.confrdjango.utils.cryptorrdjango.utils.httprrr default_token_generatorrrrfs) B:yyx67r