+ Nja0t$^RIHt^RIt^RIt^RIt^RIt^RItRtRt ] !R]P]P344t R]R&0RmRR 4mR R 4mR kR ktR RltRRltRRRlltRRltRRltR#)) annotationsN>abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789i@Bc#B"TFqfKVR8wgKVxK R#5i)N/).0seps& S/data/cameron/venvs/serve_omidlab/lib/python3.14/site-packages/werkzeug/security.py r s&CCcSjCC&s  z list[str] _os_alt_sepsc#,"TF pRV 2xK R#5i)COMNrrcs& r r r +*AA3i*u123456789¹²³c#,"TF pRV 2xK R#5i)LPTNrrs& r r r rrNULPRNc V^8dQhRRRR/#)lengthintreturnstrr)formats"r __annotate__rsFFSFSFchV^8:d \R4hRPR\V444#)zAGenerate a random string of SALT_CHARS with specified ``length``.zSalt length must be at least 1.c3V"TFp\P!\4xK! R#5iN)secretschoice SALT_CHARS)r_s& r r gen_salt..!sE}!7>>*--}s')) ValueErrorjoinrange)rs&r gen_saltr,s. {:;; 77EuV}E EErc(V^8dQhRRRRRRRR/#)rmethodrsaltpasswordrztuple[str, str]r)rs"r rr$s(-=-=3-=c-=S-=_-=rc VPR4vrVP4pVP4pVR8XdmV'gR p^p^pM\\V4wrgp^V,V,V,p \ P !WTWgWR7P4RV RV RV 23#VR8Xd\V4p V ^8Xd Rp \p MEV ^8XdV^,p \p M.V ^8XdV^,p \V^,4p M \ R4h\ P!WWL4P4R V RV 23#\ R V R 24h \d\ R4Rhi;i) :scryptz'scrypt' takes 3 arguments.N)r/nrpmaxmemzscrypt:pbkdf2sha256z'pbkdf2' takes 2 arguments.zpbkdf2:zInvalid hash method 'z'.i) splitencodemaprr)hashlibr3hexlenDEFAULT_PBKDF2_ITERATIONS pbkdf2_hmac) r.r/r0args salt_bytespassword_bytesr4r5r6r7len_args hash_name iterationss &&& r _hash_internalrH$svLL%MFJ__&N AAA Jc4.aq1q NN1Q ceaS!AaS !   8 t9 q= I2J ]QI2J ]QIT!WJ:; ;   : cei[* .   0;<?TI Js E E!c(V^8dQhRRRRRRRR/#)rr0rr. salt_lengthrrr)rs"r rrTs,$)$)$)$)8;$)$)rcH\V4p\WV4wrEV RV RV 2#)aSecurely hash a password for storage. A password can be compared to a stored hash using :func:`check_password_hash`. The following methods are supported: - ``scrypt``, the default. The parameters are ``n``, ``r``, and ``p``, the default is ``scrypt:32768:8:1``. See :func:`hashlib.scrypt`. - ``pbkdf2``, less secure. The parameters are ``hash_method`` and ``iterations``, the default is ``pbkdf2:sha256:600000``. See :func:`hashlib.pbkdf2_hmac`. Default parameters may be updated to reflect current guidelines, and methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param password: The plaintext password. :param method: The key derivation function and parameters. :param salt_length: The number of characters to generate for the salt. .. versionchanged:: 3.1 The default iterations for pbkdf2 was increased to 1,000,000. .. versionchanged:: 2.3 Scrypt support was added. .. versionchanged:: 2.3 The default iterations for pbkdf2 was increased to 600,000. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. $)r,rH)r0r.rJr/h actual_methods&&& r generate_password_hashrOTs5D K D%fH=A_AdV1QC ((rc$V^8dQhRRRRRR/#)rpwhashrr0rboolr)rs"r rr{s&SSSsStSrcVPR^4wr#p\P!\ Y#T4^,T4# \dR#i;i)aSecurely check that the given stored password hash, previously generated using :func:`generate_password_hash`, matches the given password. Methods may be deprecated and removed if they are no longer considered secure. To migrate old hashes, you may generate a new hash when checking an old hash, or you may contact users with a link to reset their password. :param pwhash: The hashed password. :param password: The plaintext password. .. versionchanged:: 2.3 All plain hashes are deprecated and will not be supported in Werkzeug 3.0. rLF)r:r)hmaccompare_digestrH)rQr0r.r/hashvals&& r check_password_hashrW{sQ & S! 4g   ~fHEaH' RR s? A Ac$V^8dQhRRRRRR/#)r directoryr untrustedrz str | Noner)rs"r rrs!8"8"8"#8"*8"rcaV'gRpV.pVEFGoS'gK\P!S4o\PP S4'gSP R4'gSR8XgSP R4'g\ ;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'gn\PR8Xd\\ ;QJd+R SPR44F 'gK RM RM!R SPR444'dR #VPS4EKJ \P!V!#) aXSafely join zero or more untrusted path components to a trusted base directory to avoid escaping the base directory. The untrusted path is assumed to be from/for a URL, such as for serving files. Therefore, it should only use the forward slash ``/`` path separator, and will be joined using that separator. On Windows, the backslash ``\`` separator is not allowed. :param directory: The trusted base directory. :param untrusted: The untrusted path components relative to the base directory. :return: A safe path, otherwise ``None``. .. versionchanged:: 3.1.6 Special device names in multi-segment paths are not allowed on Windows. .. versionchanged:: 3.1.5 More special device names, regardless of extension or trailing spaces, are not allowed on Windows. .. versionchanged:: 3.1.4 Special device names are not allowed on Windows. .rz..z../c3,<"TF qS9xK R#5ir#r)rr parts& r r safe_join..s7,3$;,sTFntc3"TF@pVPR4^,P4P4\9xKB R#5i)r\N) partitionstripupper_windows_device_files)rr6s& r r r_s=,KK$Q'--/557;PP,sAA N) posixpathnormpathospathisabs startswithanyr namer:appendr*)rYrZpartsr^s&* @r safe_joinrps0  KE !!$' GGMM$  s##t|u%%s7,7sss7,7774C!ZZ_CCC!ZZ_  T/2 >>5 !!r>AUXCONCONIN$CONOUT$)r3)__conditional_annotations__ __future__rr=rTrhrfr$r&r@listr altsepr __annotations__rer,rHrOrWrp)rvs@r r{s""  M %FFBII& i  ,*+  ,*+     F-=`$)NS,8"r