From cdf976a9e88cd4642fadccadb532417ec9bdd548 Mon Sep 17 00:00:00 2001
From: Admin MPCZ <admin@mpcz.fr>
Date: Tue, 14 Apr 2026 23:45:05 +0200
Subject: [PATCH] test_psmp: dechiffre Fernet via secrets_service (mot de passe
 stocke chiffre)

---
 tools/test_psmp.py | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/tools/test_psmp.py b/tools/test_psmp.py
index 658df5e..8c61c81 100644
--- a/tools/test_psmp.py
+++ b/tools/test_psmp.py
@@ -21,8 +21,16 @@ DATABASE_URL = os.getenv("DATABASE_URL_DEMO") or os.getenv("DATABASE_URL") \
 
 
 def get_secret(conn, key):
+    """Lit + dechiffre via le service officiel (Fernet)."""
+    from app.services.secrets_service import decrypt
     row = conn.execute(text("SELECT value FROM app_secrets WHERE key=:k"), {"k": key}).fetchone()
-    return row.value if row else None
+    if not row or not row.value:
+        return None
+    try:
+        return decrypt(row.value)
+    except Exception:
+        # Fallback si stocke en clair
+        return row.value
 
 
 def main():