ó `¾Tc@sŠdZddlZddlZddlZddlZddlmZddlmZddlmZddlm Z ddl m Z m Z m Z ddlmZdd lmZmZdd lmZdd lmZdd lmZmZejd ƒZd„Zdd„Zdefd„ƒYZdefd„ƒYZ de!fd„ƒYZ"dZ#de"fd„ƒYZ$de!fd„ƒYZ%dS(s5 werkzeug.contrib.sessions ~~~~~~~~~~~~~~~~~~~~~~~~~ This module contains some helper classes that help one to add session support to a python WSGI application. For full client-side session storage see :mod:`~werkzeug.contrib.securecookie` which implements a secure, client-side session storage. Application Integration ======================= :: from werkzeug.contrib.sessions import SessionMiddleware, \ FilesystemSessionStore app = SessionMiddleware(app, FilesystemSessionStore()) The current session will then appear in the WSGI environment as `werkzeug.session`. However it's recommended to not use the middleware but the stores directly in the application. However for very simple scripts a middleware for sessions could be sufficient. This module does not implement methods or ways to check if a session is expired. That should be done by a cronjob and storage specific. For example to prune unused filesystem sessions one could check the modified time of the files. It sessions are stored in the database the new() method should add an expiration timestamp for the session. For better flexibility it's recommended to not use the middleware but the store and session object directly in the application dispatching:: session_store = FilesystemSessionStore() def application(environ, start_response): request = Request(environ) sid = request.cookies.get('cookie_name') if sid is None: request.session = session_store.new() else: request.session = session_store.get(sid) response = get_the_response_object(request) if request.session.should_save: session_store.save(request.session) response.set_cookie('cookie_name', request.session.sid) return response(environ, start_response) :copyright: (c) 2014 by the Werkzeug Team, see AUTHORS for more details. :license: BSD, see LICENSE for more details. iÿÿÿÿN(tpath(ttime(trandom(tsha1(tdumptloadtHIGHEST_PROTOCOL(t CallbackDict(t dump_cookiet parse_cookie(tClosingIterator(trename(tPY2t text_types^[a-f0-9]{40}$cCs2ttdƒrtjdƒSttƒƒjdƒS(Nturandomitascii(thasattrtosRR Rtencode(((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyt_urandomJs cCs[|dkr$t|ƒjdƒ}ntdj|ttƒƒjdƒtƒgƒƒjƒS(NRt( tNonetreprRRtjointstrRRt hexdigest(tsalt((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyt generate_keyPs   tModificationTrackingDictcBs)eZdZd„Zd„Zd„ZRS(tmodifiedcOs<d„}t|_tj|d|ƒtj|||ŽdS(NcSs t|_dS(N(tTrueR(tself((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyt on_update^sR (tFalseRRt__init__tdicttupdate(RtargstkwargsR ((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR"]s  cCsdtƒ}tj|jƒ}xB|jD]7}t|||ƒ}||k r%t|||ƒq%q%W|S(sCreate a flat copy of the dict.(tobjectt__new__t __class__t __slots__tgetattrtsetattr(Rtmissingtresulttnametval((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pytcopyds  cCs |jƒS(N(R1(R((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyt__copy__ns(smodified(t__name__t __module__R*R"R1R2(((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyRZs  tSessioncBs?eZdZejdZed„Zd„Zed„ƒZ RS(s²Subclass of a dict that keeps track of direct object changes. Changes in mutable structures are not tracked, for those you have to set `modified` to `True` by hand. tsidtnewcCs&tj||ƒ||_||_dS(N(RR"R6R7(RtdataR6R7((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR"ys cCs/d|jjtj|ƒ|jr'dp*dfS(Ns <%s %s%s>t*R(R)R3R#t__repr__t should_save(R((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR:~s  cCs|jS(sÎTrue if the session should be saved. .. versionchanged:: 0.6 By default the session is now only saved if the session is modified, not if it is new like it was before. (R(R((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR;…s(ssidsnew( R3R4t__doc__RR*R!R"R:tpropertyR;(((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR5rs    t SessionStorecBs\eZdZd d„Zd„Zd d„Zd„Zd„Zd„Z d„Z d„Z RS( s>Baseclass for all session stores. The Werkzeug contrib module does not implement any useful stores besides the filesystem store, application developers are encouraged to create their own stores. :param session_class: The session class to use. Defaults to :class:`Session`. cCs"|dkrt}n||_dS(N(RR5t session_class(RR?((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR"™s  cCstj|ƒdk S(s&Check if a key has the correct format.N(t_sha1_retmatchR(Rtkey((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyt is_valid_keyžscCs t|ƒS(s1Simple function that generates a new session key.(R(RR((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR¢scCs|ji|jƒtƒS(sGenerate a new session.(R?RR(R((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR7¦scCsdS(sSave a session.N((Rtsession((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pytsaveªscCs|jr|j|ƒndS(s(Save if a session class wants an update.N(R;RE(RRD((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pytsave_if_modified­s cCsdS(sDelete a session.N((RRD((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pytdelete²scCs|ji|tƒS(s´Get a session for this sid or a new session object. This method has to check if the session key is valid and create a new session if that wasn't the case. (R?R(RR6((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pytgetµsN( R3R4R<RR"RCRR7RERFRGRH(((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR>s       s .__wz_sesstFilesystemSessionStorecBsSeZdZd dd edd„Zd„Zd„Zd„Zd„Z d„Z RS( sÐSimple example session store that saves sessions on the filesystem. This store works best on POSIX systems and Windows Vista / Windows Server 2008 and newer. .. versionchanged:: 0.6 `renew_missing` was added. Previously this was considered `True`, now the default changed to `False` and it can be explicitly deactivated. :param path: the path to the folder used for storing the sessions. If not provided the default temporary directory is used. :param filename_template: a string template used to give the session a filename. ``%s`` is replaced with the session id. :param session_class: The session class to use. Defaults to :class:`Session`. :param renew_missing: set to `True` if you want the store to give the user a new sid if the session was not yet saved. swerkzeug_%s.sessi¤cCs¦tj||ƒ|dkr+tjƒ}n||_t|tƒrgtrg|j t j ƒp^dƒ}n|j t ƒ s‡tdt ƒ‚||_||_||_dS(Nsutf-8s&filename templates may not end with %s(R>R"Rttempfilet gettempdirRt isinstanceR R Rtsystgetfilesystemencodingtendswitht_fs_transaction_suffixtAssertionErrortfilename_templatet renew_missingtmode(RRRRR?RSRT((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR"×s     cCsMt|tƒr3tr3|jtjƒp*dƒ}ntj|j|j|ƒS(Nsutf-8( RLR R RRMRNRRRR(RR6((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pytget_session_filenameæscCs¯|j|jƒ}tjdtd|jƒ\}}tj|dƒ}ztt |ƒ|t ƒWd|j ƒXy$t ||ƒtj ||jƒWnttfk rªnXdS(Ntsuffixtdirtwb(RUR6RJtmkstempRPRRtfdopenRR#RtcloseR tchmodRTtIOErrortOSError(RRDtfntfdttmptf((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyREîs  cCs;|j|jƒ}ytj|ƒWntk r6nXdS(N(RUR6RtunlinkR^(RRDR_((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyRGýs  cCs±|j|ƒs|jƒSyt|j|ƒdƒ}Wn*tk ra|jrX|jƒSi}n=Xz.yt|ƒ}Wntk rŽi}nXWd|jƒX|j ||t ƒS(Ntrb( RCR7topenRUR]RSRt ExceptionR[R?R!(RR6RbR8((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyRHs       cCs¶|jjddƒ\}}tjdtj|ƒtj|ƒfƒ}g}xctj|jƒD]O}|jt ƒrzq_n|j |ƒ}|dk r_|j |j dƒƒq_q_W|S(sHLists all sessions in the store. .. versionadded:: 0.6 s%sis %s(.{5,})%s$N(RRtsplittretcompiletescapeRtlistdirRRORPRARtappendtgroup(Rtbeforetaftert filename_reR.tfilenameRA((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pytlists N( R3R4R<RR!R"RURERGRHRr(((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyRIÁs    tSessionMiddlewarec Bs8eZdZddddddedd„Zd„ZRS(sŠA simple middleware that puts the session object of a store provided into the WSGI environ. It automatically sets cookies and restores sessions. However a middleware is not the preferred solution because it won't be as fast as sessions managed by the application itself and will put a key into the WSGI environment only relevant for the application which is against the concept of WSGI. The cookie parameters are the same as for the :func:`~dump_cookie` function just prefixed with ``cookie_``. Additionally `max_age` is called `cookie_age` and not `cookie_max_age` because of backwards compatibility. t session_idt/swerkzeug.sessionc Cs^||_||_||_||_||_||_||_||_| |_| |_ dS(N( tapptstoret cookie_namet cookie_agetcookie_expirest cookie_patht cookie_domaint cookie_securetcookie_httponlyt environ_key( RRvRwRxRyRzR{R|R}R~R((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyR":s         cs§t|jddƒƒ}|jˆjdƒ}|dkrKˆjjƒ‰nˆjj|ƒ‰ˆ|ˆj\s( R RHRxRRwR7RR Rv(RtenvironR„tcookieR6R…((R„RRDs_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyt__call__Is   N(R3R4R<RR!R"R‰(((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyRs*s   (&R<RhRRMRJRRRthashlibRtpickleRRRtwerkzeug.datastructuresRtwerkzeug.utilsRR t werkzeug.wsgiR twerkzeug.posixemulationR twerkzeug._compatR R RiR@RRRRR5R'R>RPRIRs(((s_/var/www/send.findwatt.com/datamanager/lib/python2.7/site-packages/werkzeug/contrib/sessions.pyt5s.      .i