U }ag@sddlmZddlmZddlmZddlmZmZddl m Z m Z m Z m Z mZmZmZmZddlmZddlmZeeZGdd d eeZd S) ) getLogger)Optional)settings)AxesBaseHandlerAbstractAxesHandler) get_cacheget_cache_timeoutget_client_cache_keysget_client_strget_client_usernameget_credentialsget_failure_limitget_lockout_parameters) AccessAttempt)user_locked_outc@steZdZdZddZddddeeeeeeddd Z dee ed d d Z de d ddZ ddZ ddZdS)AxesCacheHandlerzs Signal handler implementation that records user login attempts to cache and locks users out if necessary. cCs t|_dS)N)rcacheselfrK/var/www/html/publicvenv/lib/python3.8/site-packages/axes/handlers/cache.py__init__szAxesCacheHandler.__init__NF) ip_addressusernameip_or_username)rrrreturncCsg}d}|dkr |dkr td|r,td|tt||d|D](}|j|}||dk rht|nd7}qFtd||S)Nrz#Cannot clear all entries from cachez9Due to the cache key ip_or_username=True is not supported)rrz-AXES: Reset %d access attempts from database.) NotImplementedErrorextendr rrdeleteintloginfo)rrrr cache_keyscount cache_keyZdeletedrrrreset_attemptss$   zAxesCacheHandler.reset_attempts) credentialsrcs$t||}tfdd|D}|S)Nc3s|]}jj|ddVqdS)rdefaultN)rget).0r%rrr ?sz0AxesCacheHandler.get_failures..)r max)rrequestr'r#Z failure_countrrr get_failures=s   zAxesCacheHandler.get_failures)r'cKs|dkrtddSt||}t||}|dgkrJ|dkrJtddStjst|jrt||_t j d|||j ddSt ||j |j |j|}|||rtd|dSt||}t|} g} |D]L} |jj| d| d } | r| dq| |jj| dd |jj| | d qt| } | |_| dkr>td || t||n td |tjr| t||krtd|d|_||_t j d|||j ddS)z When user login fails, save attempt record in cache and lock user out if necessary. :raises AxesSignalPermissionDenied: if user should be locked out. NzMAXES: AxesCacheHandler.user_login_failed does not function without a request.rzfAXES: Username is None and username is the only one lockout parameter, new record will NOT be created.Zaxes)r.rrz.AXES: Login failed from whitelisted client %s.r)keyvaluetimeout)r0delta)r0r2z\AXES: Repeated login failure by %s. Count = %d of %d. Updating existing record in the cache.z@AXES: New login failure by %s. Creating new record in the cache.z3AXES: Locking out %s after repeated login failures.T)r!errorr rwarningrZ-AXES_RESET_COOL_OFF_ON_FAILURE_DURING_LOCKOUTZaxes_locked_outZaxes_credentialsrsendaxes_ip_addressr axes_user_agentaxes_path_infoZis_whitelistedr"r rraddappendincrtouchr-Zaxes_failures_since_startr ZAXES_LOCK_OUT_AT_FAILURE)rsenderr'r.kwargsrZlockout_parameters client_strr#Z cache_timeoutZfailuresr%addedfailures_since_startrrruser_login_failedDs        z"AxesCacheHandler.user_login_failedc Ksz|}t|}t||j|j|j|}td|tj rvt ||}|D].} |j j | dd} |j | td| |qFdS)zN When user logs in, update the AccessLog related to the user. zAXES: Successful login by %s.rr(z8AXES: Deleted %d failed login attempts by %s from cache.N) get_usernamer r r7r8r9r!r"rZAXES_RESET_ON_SUCCESSr rr*r) rr>r.userr?rr'r@r#r%rBrrruser_logged_ins(   zAxesCacheHandler.user_logged_incKs6|r |nd}t||j|j|j|}td|dS)NzAXES: Successful logout by %s.)rDr r7r8r9r!r")rr>r.rEr?rr@rrruser_logged_outsz AxesCacheHandler.user_logged_out)N)N)__name__ __module__ __qualname____doc__rrstrboolr r&dictr/rCrFrGrrrrrs [rN)loggingrtypingrZ axes.confrZaxes.handlers.baserrZ axes.helpersrrr r r r r rZ axes.modelsrZ axes.signalsrrHr!rrrrrs   (