diff --git a/hvac_handler.py b/hvac_handler.py index 15d8ef0..b99eff4 100644 --- a/hvac_handler.py +++ b/hvac_handler.py @@ -1,27 +1,13 @@ -import base64 import hvac +import base64 +import os - -client = hvac.Client( - url='http://127.0.0.1:8200', - token='root' -) +HVAC_AGENT_URL = os.getenv("HVAC_AGENT_URL","http://vault-agent:8201") +client = hvac.Client(url=HVAC_AGENT_URL) def encrypt_token(token: str) -> str: response = client.secrets.transit.encrypt_data( name='push-tokens', plaintext=base64.b64encode(token.encode()).decode() ) - return response['data']['ciphertext'] - - -# Decrypt a device token (for worker use) -def decrypt_token(ciphertext: str) -> str: - response = client.secrets.transit.decrypt_data( - name='push-tokens', - ciphertext=ciphertext - ) - plaintext_b64 = response['data']['plaintext'] - return base64.b64decode(plaintext_b64).decode() - - + return response['data']['ciphertext'] \ No newline at end of file