26 lines
634 B
Python
26 lines
634 B
Python
import logging
|
|
|
|
from cryptography.fernet import Fernet
|
|
|
|
from secret_manager import MissingCredentialError, get_secret
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
try:
|
|
encryption_key = get_secret("ENCRYPTION_KEY", "/etc/secrets/encryption_key")
|
|
logger.debug("Loaded encryption key")
|
|
except MissingCredentialError:
|
|
logger.fatal("Could not load encryption key")
|
|
raise
|
|
|
|
fernet = Fernet(encryption_key)
|
|
|
|
|
|
def encrypt_token(token: str) -> str:
|
|
"""Encrypt a token string."""
|
|
return fernet.encrypt(token.encode()).decode()
|
|
|
|
|
|
def decrypt_token(token: str) -> str:
|
|
"""Decrypt a token string."""
|
|
return fernet.decrypt(token.encode()).decode() |