nacl-middleware 0.0.9

Example Server Code

from aiohttp.web import Application, Response, run_app
from nacl_middleware import nacl_middleware, Nacl, MailBox

pynacl = Nacl()
public_key_hex = pynacl.decoded_public_key()
print(public_key_hex)

app = Application(middlewares=[
    nacl_middleware(pynacl.private_key)
])

async def thanks_handler(request):
    decrypted_message = request['decrypted_message']
    mail_box: MailBox = request['mail_box']
    if decrypted_message == 'Thank you!':
        text = 'You are welcome!'
    text = "Pardon me?"
    return Response(text = mail_box.box(text))

app.router.add_get('/handle_thanks', thanks_handler)

run_app(app)

Example Client Code

from aiohttp import ClientSession
from asyncio import run
from nacl_middleware import MailBox, Nacl

pynacl = Nacl()
server_hex_public_key = "cbe3b3cf345b24bd050db13bb5f1165f47f36f7151bbba9b27bdef0922674f4d"

async def main():
    mail_box = MailBox(pynacl.private_key, server_hex_public_key)

    def get_params(message):
        return {
            "publicKey": pynacl.decoded_public_key(),
            "encryptedMessage": mail_box.box(message)
        }

    async with ClientSession() as session:
        async with session.get('http://localhost:8080/handle_thanks', params=get_params('Thank you!')) as response:
            encryted_reply = await response.text()
            reply = mail_box.unbox(encryted_reply)
            print("Reply:", reply)

run(main())

Certificates Creation

# Generate a private key (client.key)
openssl genpkey -algorithm RSA -out client.key

# Create a certificate signing request (client.csr)
openssl req -new -key client.key -out client.csr

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout selfsigned.key -out selfsigned.crt

openssl x509 -req -in client.csr -CA selfsigned.crt -CAkey selfsigned.key -CAcreateserial -out client.crt -days 365

Configuration

Once a pytest run has generated a config.json file, you can edit it and add:

{
    "ssl": {
        "cert_path": "selfsigned.crt",
        "key_path": "selfsigned.key"
    }
}

You should now be able to perform the test with SSL enabled.

pytest -s