f"ddlZddlmZddlmZddlmZddlmZm Z ddl m Z ddl m Z mZddlmZdd lmZdd lmZdd lmZdd lmZmZe d ZdZdZdZdefdZdefdZ defdZ!y)N)SimpleNamespace)settings)HttpResponseRedirect)NoReverseMatchreverse)sync_and_async_middleware)iscoroutinefunction sync_to_async) app_settings) get_adapter)flows)context)ImmediateHttpResponseReauthenticationRequiredcHtrfd}nfd}d}||_|S)Nc,Kt|_tj|5|d{}t ||rt |d{t ||rt|d{}|cdddS7M707#1swYyxYwwN)rallauthrrequest_context_should_check_dangling_login_acheck_dangling_login_should_redirect_accounts_aredirect_accountsrequestresponse get_responses U/var/www/cs2snipe.com/venv/lib/python3.12/site-packages/allauth/account/middleware.py middlewarez%AccountMiddleware..middlewares-/GO((1 !-g!66/B0999,Wh?%8%AAH   69A   sP%B BBBBB2B3B8 BBBBB Bct|_tj|5|}t ||r t |t ||r t|}|cdddS#1swYyxYwr)rrrrr_check_dangling_loginr_redirect_accountsrs rrz%AccountMiddleware..middleware%sc-/GO((1 '0/B)'2,Wh?1':H    s 8A((A1c t|tr |jSt|trXt d}t j |j}|r|dd}tjj||Sy)N account_loginrurl) isinstancerrrrr get_reauthentication_methodsuserr reauthenticationsuspend_request)r exception redirect_urlmethodss rprocess_exceptionz,AccountMiddleware..process_exception/ss i!6 7%% %  #; <"?3L!m@@NG&qz%0 ))99'<P P =)r r.)rrr.s` rAccountMiddlewarer0s+<(  Q$5J r/cr|jjd}|r|dk7ry|jjd}|r|jdd}|r|dk7rytjr)|j j tjs|j dvry|jd zd k7ryy ) Nzsec-fetch-destdocumentFz content-type;rz text/html)z /favicon.icoz /robots.txtz /humans.txtdT)headersget partitionr STATIC_URLpath startswith status_code)rrsec_fetch_dest content_types rrr=s__(()9:N.J6##''7L#--c215  3  7 78K8K L   s"a' r/cddlm}t|dds|jj t j jx}rt|trQ|j dij dij d}||jk(rtjsy|jjt j jyyy)Nr)EmailVerificationStage_account_login_accessedFstatestagescurrent)allauth.account.stagesr@getattrsessionr7r loginLOGIN_SESSION_KEYr&dictkeyr "EMAIL_VERIFICATION_BY_CODE_ENABLEDpop)rr@rH current_stages rr!r!Ts= 75u =OO'' (E(EF F5 F%& % '2 6 : :8R H L LY W !%;%?%??(KK OO   = = > G >r/cJKtt|d{y7wr)r r!)rs rrrjs .-- .w 777s #!#returnc|jdk7ry td}td}tjj ||g}t |dks||jk7ryy#t$rYywxYw)a URLs should be hackable. Yet, assuming allauth is included like this... path("accounts/", include("allauth.urls")), ... and a user would attempt to navigate to /accounts/, a 404 would be presented. This code catches that 404, and redirects to either the email management overview or the login page, depending on whether or not the user is authenticated. iFr$ account_emailT)r<rrosr: commonprefixlen)rr login_path email_pathprefixs rrrns|s"_- _- WW ! !:z": ;F 6{a6W\\1  sA(( A43A4cKtd}td}|jd{}t|jr|S|S7!wNrRr$)rauserris_authenticatedrrXrWr(s rrrsH)J)J D d.C.C TT TT !s*AA"Actd}td}|j}t|jr|S|Sr[)rr(rr]r^s rr"r"s:)J)J <rmsy ! ,/=;(/*  $$N.?,8D6U*>UU#7Ur/