forked from iarv/pyMC_Repeater
Lloyd
7112da98c2
- Implemented JWT authentication with auto-generated secret if not provided. - Added API token management functionality. - Created authentication endpoints for login, token refresh, verification, and password change. - Introduced API documentation endpoints for Swagger UI and OpenAPI spec. - Enhanced CORS support for API and documentation endpoints. - Updated OpenAPI specification to include new authentication and system endpoints.
50 lines
1.4 KiB
Python
50 lines
1.4 KiB
Python
import secrets
|
|
import hmac
|
|
import hashlib
|
|
from typing import Optional, List, Dict
|
|
import logging
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class APITokenManager:
|
|
def __init__(self, sqlite_handler, secret_key: str):
|
|
|
|
self.db = sqlite_handler
|
|
self.secret_key = secret_key.encode('utf-8')
|
|
|
|
def generate_api_token(self) -> str:
|
|
return secrets.token_hex(32)
|
|
|
|
def hash_token(self, token: str) -> str:
|
|
return hmac.new(
|
|
self.secret_key,
|
|
token.encode('utf-8'),
|
|
hashlib.sha256
|
|
).hexdigest()
|
|
|
|
def create_token(self, name: str) -> tuple[int, str]:
|
|
plaintext_token = self.generate_api_token()
|
|
token_hash = self.hash_token(plaintext_token)
|
|
|
|
token_id = self.db.create_api_token(name, token_hash)
|
|
|
|
logger.info(f"Created API token '{name}' with ID {token_id}")
|
|
return token_id, plaintext_token
|
|
|
|
def verify_token(self, token: str) -> Optional[Dict]:
|
|
token_hash = self.hash_token(token)
|
|
return self.db.verify_api_token(token_hash)
|
|
|
|
def revoke_token(self, token_id: int) -> bool:
|
|
deleted = self.db.revoke_api_token(token_id)
|
|
|
|
if deleted:
|
|
logger.info(f"Revoked API token ID {token_id}")
|
|
|
|
return deleted
|
|
|
|
def list_tokens(self) -> List[Dict]:
|
|
return self.db.list_api_tokens()
|
|
|