notifier/backend-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Switched to HVAC Agent instead of connecting to the vault directly

Browse Source
This commit is contained in:
florian 2025-10-04 22:18:51 +02:00
parent b2af6fe289
commit f8c9820e2c
1 changed files with 5 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
hvac_handler.py
View File

@ -1,27 +1,13 @@
import base64
import hvac import hvac
import base64
import os
HVAC_AGENT_URL = os.getenv("HVAC_AGENT_URL","http://vault-agent:8201")
client = hvac.Client( client = hvac.Client(url=HVAC_AGENT_URL)
url='http://127.0.0.1:8200',
token='root'
)
def encrypt_token(token: str) -> str: def encrypt_token(token: str) -> str:
response = client.secrets.transit.encrypt_data( response = client.secrets.transit.encrypt_data(
name='push-tokens', name='push-tokens',
plaintext=base64.b64encode(token.encode()).decode() plaintext=base64.b64encode(token.encode()).decode()
) )
return response['data']['ciphertext'] return response['data']['ciphertext']
# Decrypt a device token (for worker use)
def decrypt_token(ciphertext: str) -> str:
response = client.secrets.transit.decrypt_data(
name='push-tokens',
ciphertext=ciphertext
)
plaintext_b64 = response['data']['plaintext']
return base64.b64decode(plaintext_b64).decode()