spakky-cryptography

spakky-cryptography는 암호화 utility와 서명된 AuthContextSnapshot 전파를 제공합니다. Password hash 검증과 snapshot sign/verify capability를 spakky-auth provider contribution으로 연결합니다.

유지되는 Utility

  • Key, Base64Encoder, Hash, HMAC
  • ICryptor, ISigner
  • Aes, Gcm, Rsa, AsymmetricKey
  • Argon2PasswordEncoder, BcryptPasswordEncoder, Pbkdf2PasswordEncoder, ScryptPasswordEncoder

JWT/OIDC token 검증은 이 패키지의 범위 밖이며 spakky-oidc가 담당합니다.

설치

pip install spakky-cryptography

Auth snapshot propagation이나 password provider로 쓰려면 spakky-auth와 함께 로드합니다.

pip install spakky-auth spakky-cryptography

설정

CryptographyAuthProviderConfig는 SPAKKY_CRYPTOGRAPHY_ 접두사의 환경변수를 읽습니다.

환경변수 의미 기본값
SPAKKY_CRYPTOGRAPHY_SNAPSHOT_KEY snapshot HMAC key, URL-safe base64 문자열 런타임 생성 32-byte key
SPAKKY_CRYPTOGRAPHY_SNAPSHOT_KEY_ID signed snapshot envelope에 들어갈 key id spakky-cryptography:default
SPAKKY_CRYPTOGRAPHY_SNAPSHOT_TTL 새 snapshot 유효 기간. 환경변수로 지정할 때는 초 단위 숫자 또는 Pydantic duration 형식을 사용 300
SPAKKY_CRYPTOGRAPHY_VERIFICATION_AVAILABLE snapshot verification provider 가용성 true
SPAKKY_CRYPTOGRAPHY_PASSWORD_AVAILABLE password hash/verify provider 가용성 true

운영에서는 모든 프로세스가 같은 snapshot을 검증할 수 있도록 SNAPSHOT_KEY를 명시적으로 고정하세요. 기본 key는 프로세스 시작마다 생성되므로 단일 프로세스 개발용입니다.

Auth Provider Capability

플러그인은 다음 capability를 구현하는 CryptographyAuthProvider를 등록합니다.

  • AuthCapability.SNAPSHOT_SIGN
  • AuthCapability.SNAPSHOT_VERIFY
  • AuthCapability.PASSWORD_HASH
  • AuthCapability.PASSWORD_VERIFY

Snapshot verification은 누락, invalid, expired envelope을 CHALLENGE decision으로 매핑합니다. Provider를 사용할 수 없는 상태는 ERROR로 매핑합니다.

플러그인 등록

Base plugin entry point는 CryptographyAuthProviderConfig, CryptographyAuthProvider를 등록하고 다음 port를 같은 provider 구현체에 binding합니다.

  • IAuthContextSnapshotSigner
  • IAuthContextSnapshotVerifier
  • IPasswordHasher
  • IPasswordVerifier

Auth feature contribution entry point는 spakky.contributions.spakky.auth group에 AuthProviderContribution capability metadata를 등록합니다. spakky-auth의 startup validation은 이 metadata로 snapshot/password capability provider count를 검증합니다.

사용 예

import spakky.auth
import spakky.plugins.cryptography
from spakky.core.application.application import SpakkyApplication
from spakky.core.application.application_context import ApplicationContext

app = (
    SpakkyApplication(ApplicationContext())
    .load_plugins(
        include={
            spakky.auth.PLUGIN_NAME,
            spakky.plugins.cryptography.PLUGIN_NAME,
        }
    )
    .start()
)

개발 검증

패키지 단위 검증은 해당 패키지 디렉토리에서 실행합니다.

uv run ruff format .
uv run ruff check .
uv run pyrefly check
uv run pytest

pytest는 각 패키지 pyproject.toml의 coverage 설정을 사용합니다.

라이선스

MIT License

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for Spakky from gravatar.com Spakky

Credits

PyPI data
Data sourced directly from PyPI's database.

Author: Spakky

License

MIT

Requires

Python >=3.12

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

spakky_cryptography-8.0.0.tar.gz (14.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

spakky_cryptography-8.0.0-py3-none-any.whl (26.0 kB view details)

Uploaded Python 3

File details

Details for the file spakky_cryptography-8.0.0.tar.gz.

File metadata

  • Download URL: spakky_cryptography-8.0.0.tar.gz
  • Upload date:
  • Size: 14.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for spakky_cryptography-8.0.0.tar.gz
Algorithm Hash digest
SHA256 c9cae9a491ac922f9441a086bbaca9e11eba426a153dd2fa2cd369a417a8d36a
MD5 96e06e134225dc840aa0914dce7b24e2
BLAKE2b-256 b3a93649c65c4f9d15de628595301ad1c40ae35c3dd84205accd7db9468ff1cc

See more details on using hashes here.

Provenance

The following attestation bundles were made for spakky_cryptography-8.0.0.tar.gz:

Publisher: release.yml on E5presso/spakky-framework

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file spakky_cryptography-8.0.0-py3-none-any.whl.

File metadata

File hashes

Hashes for spakky_cryptography-8.0.0-py3-none-any.whl
Algorithm Hash digest
SHA256 9b2883e5d3fa6f08224c9b31b2475ad8ece766d8ad6d6dff7b828e0783907a36
MD5 4a7e83906dc894310baf973e827f47b5
BLAKE2b-256 bb70978cf1f7077b72525ffb8069d1e0d365849a6cb6cb1972c22792985ead52

See more details on using hashes here.

Provenance

The following attestation bundles were made for spakky_cryptography-8.0.0-py3-none-any.whl:

Publisher: release.yml on E5presso/spakky-framework

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page