ArbinaHQ/arbina-vue-apps-libs
8
0
Fork 0
Code Issues 5 Pull Requests Packages Projects 4 Releases Wiki Activity

Migrate to PyNaCl

Browse Source
This commit is contained in:
havlong
2022-12-20 15:37:10 +03:00
parent 5da81f7a04
commit 30b137de3a
3 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
vue-apps-py/README.MD
View File

@@ -31,7 +31,7 @@ def autocomplete_handler(query_model: AutoModel) -> SuggestionsModel:
api = ClientAPI(client_id='vue-app-0', client_secret='abccf12389efab222') api = ClientAPI(client_id='vue-app-0', client_secret='abccf12389efab222')
# Prepare Security # Prepare Security
key_holder = SecurityHelper(public_key='abbcbbbcaksjdhf/skdjhfnnsn/sjdkfjj21234=') key_holder = SecurityHelper(public_key='VoMMy/A7u6GnSajiZbwz0fpIPESA+oQ+b8Qi5LUMiN8=')
# Define intents # Define intents
intents: List[Intent] = [InlineQuery(autocomplete_handler)] intents: List[Intent] = [InlineQuery(autocomplete_handler)]

2
vue-apps-py/src/vue_apps_py/server.py
View File

@@ -28,7 +28,7 @@ def VueApp(client_api: ClientAPI,
body_to_verify = await request.body() body_to_verify = await request.body()
timestamp = request.headers['X-Signature-Timestamp'].encode('utf-8') timestamp = request.headers['X-Signature-Timestamp'].encode('utf-8')
signature = request.headers['X-Signature-Ed25519'].encode('utf-8') signature = request.headers['X-Signature-Ed25519'].encode('utf-8')
if not security_helper.is_valid(timestamp + body_to_verify, signature): if not security_helper.is_valid(timestamped_body=timestamp + body_to_verify, signature=signature):
raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail='Verification of signature failed') raise HTTPException(status_code=status.HTTP_401_UNAUTHORIZED, detail='Verification of signature failed')
@app.post(path='/ping', response_model=PongModel) @app.post(path='/ping', response_model=PongModel)

11
vue-apps-py/src/vue_apps_py/server_utils/security.py
View File

@@ -1,15 +1,16 @@
from ed25519.keys import VerifyingKey from nacl.encoding import Base64Encoder
from nacl.signing import VerifyKey
class SecurityHelper: class SecurityHelper:
public_key: VerifyingKey public_key: VerifyKey
def __init__(self, public_key: str): def __init__(self, public_key: str):
self.public_key = VerifyingKey(public_key.encode(), encoding='base64') self.public_key = VerifyKey(public_key.encode(), encoder=Base64Encoder)
def is_valid(self, http: bytes, signature: bytes) -> bool: def is_valid(self, timestamped_body: bytes, signature: bytes) -> bool:
try: try:
self.public_key.verify(signature, http, encoding='base64') self.public_key.verify(timestamped_body, signature, encoder=Base64Encoder)
return True return True
except AssertionError: except AssertionError:
return False return False