1
0
mirror of https://github.com/quay/quay.git synced 2026-01-26 06:21:37 +03:00
Files
quay/util/security/token.py
Kenny Lee Sin Cheong 5f63b3a7bb chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)
* chore: drop deprecated tables and remove unused code

* isort imports

* migration: check for table existence before drop
2023-08-25 12:17:24 -04:00

38 lines
1.2 KiB
Python

import base64
from collections import namedtuple
from util.bytes import Bytes
DELIMITER = ":"
DecodedToken = namedtuple("DecodedToken", ["public_code", "private_token"])
def encode_public_private_token(public_code, private_token, allow_public_only=False):
# NOTE: This is for legacy tokens where the private token part is None. We should remove this
# once older installations have been fully converted over (if at all possible).
if private_token is None:
assert allow_public_only
return public_code
assert isinstance(private_token, str) and isinstance(public_code, str)
b = ("%s%s%s" % (public_code, DELIMITER, private_token)).encode("utf-8")
return base64.b64encode(b).decode("utf-8")
def decode_public_private_token(encoded, allow_public_only=False):
token = Bytes.for_string_or_unicode(encoded)
try:
decoded = base64.b64decode(token.as_encoded_str()).decode("utf-8")
except (ValueError, TypeError):
if not allow_public_only:
return None
return DecodedToken(token.as_unicode(), None)
parts = decoded.split(DELIMITER, 2)
if len(parts) != 2:
return None
return DecodedToken(*parts)