test_psmp: dechiffre Fernet via secrets_service (mot de passe stocke chiffre)
This commit is contained in:
parent
1fc24f4684
commit
cdf976a9e8
@ -21,8 +21,16 @@ DATABASE_URL = os.getenv("DATABASE_URL_DEMO") or os.getenv("DATABASE_URL") \
|
|||||||
|
|
||||||
|
|
||||||
def get_secret(conn, key):
|
def get_secret(conn, key):
|
||||||
|
"""Lit + dechiffre via le service officiel (Fernet)."""
|
||||||
|
from app.services.secrets_service import decrypt
|
||||||
row = conn.execute(text("SELECT value FROM app_secrets WHERE key=:k"), {"k": key}).fetchone()
|
row = conn.execute(text("SELECT value FROM app_secrets WHERE key=:k"), {"k": key}).fetchone()
|
||||||
return row.value if row else None
|
if not row or not row.value:
|
||||||
|
return None
|
||||||
|
try:
|
||||||
|
return decrypt(row.value)
|
||||||
|
except Exception:
|
||||||
|
# Fallback si stocke en clair
|
||||||
|
return row.value
|
||||||
|
|
||||||
|
|
||||||
def main():
|
def main():
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user