test_psmp: dechiffre Fernet via secrets_service (mot de passe stocke chiffre)
This commit is contained in:
parent
1fc24f4684
commit
cdf976a9e8
@ -21,8 +21,16 @@ DATABASE_URL = os.getenv("DATABASE_URL_DEMO") or os.getenv("DATABASE_URL") \
|
||||
|
||||
|
||||
def get_secret(conn, key):
|
||||
"""Lit + dechiffre via le service officiel (Fernet)."""
|
||||
from app.services.secrets_service import decrypt
|
||||
row = conn.execute(text("SELECT value FROM app_secrets WHERE key=:k"), {"k": key}).fetchone()
|
||||
return row.value if row else None
|
||||
if not row or not row.value:
|
||||
return None
|
||||
try:
|
||||
return decrypt(row.value)
|
||||
except Exception:
|
||||
# Fallback si stocke en clair
|
||||
return row.value
|
||||
|
||||
|
||||
def main():
|
||||
|
||||
Loading…
Reference in New Issue
Block a user