ConfigVault
ConfigVault is a Python library that provides secure, encrypted configuration storage for sensitive data. It allows you to store, retrieve, and manage configuration settings with ease and security. Perfect for applications that require protected access to configuration details like API keys or database credentials.
Table of Contents
Installation
To use ConfigVault, install it using pip:
pip install configvault
Features
- Secure, encrypted storage for sensitive configuration data.
- Supports storing, retrieving, and removing specific configurations by key.
- Option to overwrite existing configurations with @force=True@.
- Ability to clear all stored configurations at once.
Usage
Basic Initialization
To get started, initialize ConfigVault with a storage folder path and a password for key derivation. A unique, strong password is recommended.
from configvault import ConfigVault
vault = ConfigVault(folder_path='path/to/storage', password='my_secure_password')
Storing Configuration
Store a configuration dictionary securely under a specific key. Set force=True if you want to overwrite an existing entry.
data = {"database": "mydb", "user": "admin", "password": "secure_password"}
vault.store("db_config", data, force=True) # Overwrites if "db_config" exists
Retrieving Configuration
Retrieve and decrypt stored data by its key.
retrieved_data = vault.retrieve("db_config")
print(retrieved_data) # Output: {"database": "mydb", "user": "admin", "password": "secure_password"}
Removing Configurations
To remove a specific configuration by its key, use the remove method.
vault.remove("db_config") # Removes the configuration with key "db_config"
To remove all stored configurations, use the remove_all method:
vault.remove_all() # Clears all configurations
Security
ConfigVault uses @cryptography@ for secure encryption based on a key derived from your password. For optimal security:
- Use a strong, unique password.
- Store your password securely (e.g., in an environment variable).
- Set a unique folder path for each application's configurations.
ConfigVault is ideal for applications that need sensitive data management, providing a reliable, encrypted storage solution.
Metadata
Release files for configvault 0.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| configvault-0.0.2.tar.gz | 5.5 kB | Without provenance | Details for configvault-0.0.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| configvault-0.0.2-py3-none-any.whl | Python 3 | none | any | Details for configvault-0.0.2-py3-none-any.whl |
Total release size: 12.1 kB
Release files / configvault-0.0.2.tar.gz
| Download URL | configvault-0.0.2.tar.gz |
|---|---|
| Size | 5.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
b980334e74132641cd4bf72d2e2b3cc90c4e8f11274f592c33da759fdef22a03
|
|
BLAKE2b-256 checksum How to use checksums |
7ae921383fcd6df996b9f4295ae84cd89b48bd1ce9b47ecfdc4e63087ec03168
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.1.1 CPython/3.9.20
|
Release files / configvault-0.0.2-py3-none-any.whl
| Download URL | configvault-0.0.2-py3-none-any.whl |
|---|---|
| Size | 6.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3c726565e9aed6d8c0f9c985453643dba1f092fead206e8e983c6d7739a5af20
|
|
BLAKE2b-256 checksum How to use checksums |
7eaaa72421edb45cf9d2884d0206dc31c19a0d263aeae665fbbb46ddb6e594db
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/5.1.1 CPython/3.9.20
|
Security for configvault 0.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.