g<rddlmZddlmZddlmZddlmZddlm Z ddl m Z ddl mZddlm Z dZd d Zy ) wraps)messages)ValidationError)HttpResponseRedirect)reverse) get_adapter) EmailAddressctjj|dj }|st j dy)z If we would allow users to enable 2FA with unverified email address, that would allow for an attacker to signup, not verify and prevent the real owner of the account from ever regaining access. F)userverifiedunverified_emailN)r objectsfilterexistsr validation_error)r email_verifieds [/var/www/django_project/virt/lib/python3.12/site-packages/allauth/mfa/internal/flows/add.pyvalidate_can_add_authenticatorr sG &--44$4OVVXXN m,,-?@@ Nc d}|r||S|S)Nc.tfd}|S)NcB|jjr t|j|g|i|S#t$r[}|jD].}t }|j |tj|0ttdcYd}~Sd}~wwxYw)N)message mfa_index) r is_authenticatedrrrget_account_adapter add_messageERRORrr)requestargskwargseradapter view_funcs r _wrapper_viewzEredirect_if_add_not_allowed..decorator.._wrapper_views||,,F27<<@ W6t6v6 6 'F#$::V"5"7++GX^^W+UV0 0DEE Fs: BABBBr)r%r&s` r decoratorz.redirect_if_add_not_allowed..decorators" y  7  7r)functionr's rredirect_if_add_not_allowedr*s "" r)N) functoolsrdjango.contribrdjango.core.exceptionsr django.httpr django.urlsrallauth.account.adapterr rallauth.account.modelsr allauth.mfa.adapterrr*r(rrr3s(#2,F/+Ar