aaronrene / overseer-kit public
auth.py python
20 lines 599 B
Raw
sha256:106ef9e12cca7f3be3ffb2a6bd3abfa76f032dce453c9e5010d732a8d86f2e14 Reconcile reviewed credential compatibility 32254cd939885d9… Human patch 8 days ago
1 """Session credential and CSRF generation for the local app server (§Q0.6)."""
2
3 from __future__ import annotations
4
5 import secrets
6
7
8 def generate_session_credential() -> str:
9 """Return a cryptographically secure token with at least 128 bits of entropy."""
10 return secrets.token_hex(16)
11
12
13 def generate_csrf_token() -> str:
14 """Return a CSRF token with at least 128 bits of entropy."""
15 return secrets.token_hex(16)
16
17
18 def constant_time_equal(a: str, b: str) -> bool:
19 """Compare two strings in constant time."""
20 return secrets.compare_digest(a.encode("utf-8"), b.encode("utf-8"))
File History 2 commits
sha256:106ef9e12cca7f3be3ffb2a6bd3abfa76f032dce453c9e5010d732a8d86f2e14 Reconcile reviewed credential compatibility 32254cd939885d9… Human patch 8 days ago
sha256:c87cf2c2f03da507f66f93922cb339a2cbebb33ad6372a6039032fb09a20da12 Reconcile reviewed Overseer recovery d47291d5d9030de5ebef71… Human minor ⚠ 9 days ago