mirror of
https://github.com/rightup/pyMC_Repeater.git
synced 2026-03-28 17:43:06 +01:00
c2f8a2e3cd
Reapply refactor from ce8381a (replace monolithic FrameServer with thin pymc_core subclass, re-export constants, SQLite persistence hooks) while preserving pre-refactor whitespace where patch applied cleanly. Remaining files match refactor commit exactly. Diff vs ce8381a is whitespace-only. Co-authored-by: Cursor <cursoragent@cursor.com>
45 lines
1.3 KiB
Python
45 lines
1.3 KiB
Python
import hashlib
|
|
import hmac
|
|
import logging
|
|
import secrets
|
|
from typing import Dict, List, Optional
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
class APITokenManager:
|
|
def __init__(self, sqlite_handler, secret_key: str):
|
|
|
|
self.db = sqlite_handler
|
|
self.secret_key = secret_key.encode("utf-8")
|
|
|
|
def generate_api_token(self) -> str:
|
|
return secrets.token_hex(32)
|
|
|
|
def hash_token(self, token: str) -> str:
|
|
return hmac.new(self.secret_key, token.encode("utf-8"), hashlib.sha256).hexdigest()
|
|
|
|
def create_token(self, name: str) -> tuple[int, str]:
|
|
plaintext_token = self.generate_api_token()
|
|
token_hash = self.hash_token(plaintext_token)
|
|
|
|
token_id = self.db.create_api_token(name, token_hash)
|
|
|
|
logger.info(f"Created API token '{name}' with ID {token_id}")
|
|
return token_id, plaintext_token
|
|
|
|
def verify_token(self, token: str) -> Optional[Dict]:
|
|
token_hash = self.hash_token(token)
|
|
return self.db.verify_api_token(token_hash)
|
|
|
|
def revoke_token(self, token_id: int) -> bool:
|
|
deleted = self.db.revoke_api_token(token_id)
|
|
|
|
if deleted:
|
|
logger.info(f"Revoked API token ID {token_id}")
|
|
|
|
return deleted
|
|
|
|
def list_tokens(self) -> List[Dict]:
|
|
return self.db.list_api_tokens()
|