spakky-cryptography

spakky-cryptography는 암호화 utility와 서명된 AuthContextSnapshot 전파를 제공합니다. Password hash 검증과 snapshot sign/verify capability를 spakky-auth provider contribution으로 연결합니다.

유지되는 Utility

  • Key, Base64Encoder, Hash, HMAC
  • ICryptor, ISigner
  • Aes, Gcm, Rsa, AsymmetricKey
  • Argon2PasswordEncoder, BcryptPasswordEncoder, Pbkdf2PasswordEncoder, ScryptPasswordEncoder

JWT/OIDC token 검증은 이 패키지의 범위 밖이며 spakky-oidc가 담당합니다.

설치

pip install spakky-cryptography

Auth snapshot propagation이나 password provider로 쓰려면 spakky-auth와 함께 로드합니다.

pip install spakky-auth spakky-cryptography

설정

CryptographyAuthProviderConfig는 SPAKKY_CRYPTOGRAPHY_ 접두사의 환경변수를 읽습니다.

환경변수 의미 기본값
SPAKKY_CRYPTOGRAPHY_SNAPSHOT_KEY snapshot HMAC key, URL-safe base64 문자열 런타임 생성 32-byte key
SPAKKY_CRYPTOGRAPHY_SNAPSHOT_KEY_ID signed snapshot envelope에 들어갈 key id spakky-cryptography:default
SPAKKY_CRYPTOGRAPHY_SNAPSHOT_TTL 새 snapshot 유효 기간. 환경변수로 지정할 때는 초 단위 숫자 또는 Pydantic duration 형식을 사용 300
SPAKKY_CRYPTOGRAPHY_VERIFICATION_AVAILABLE snapshot verification provider 가용성 true
SPAKKY_CRYPTOGRAPHY_PASSWORD_AVAILABLE password hash/verify provider 가용성 true

운영에서는 모든 프로세스가 같은 snapshot을 검증할 수 있도록 SNAPSHOT_KEY를 명시적으로 고정하세요. 기본 key는 프로세스 시작마다 생성되므로 단일 프로세스 개발용입니다.

Auth Provider Capability

플러그인은 다음 capability를 구현하는 CryptographyAuthProvider를 등록합니다.

  • AuthCapability.SNAPSHOT_SIGN
  • AuthCapability.SNAPSHOT_VERIFY
  • AuthCapability.PASSWORD_HASH
  • AuthCapability.PASSWORD_VERIFY

Snapshot verification은 누락, invalid, expired envelope을 CHALLENGE decision으로 매핑합니다. Provider를 사용할 수 없는 상태는 ERROR로 매핑합니다.

플러그인 등록

Base plugin entry point는 CryptographyAuthProviderConfig, CryptographyAuthProvider를 등록하고 다음 port를 같은 provider 구현체에 binding합니다.

  • IAuthContextSnapshotSigner
  • IAuthContextSnapshotVerifier
  • IPasswordHasher
  • IPasswordVerifier

Auth feature contribution entry point는 spakky.contributions.spakky.auth group에 AuthProviderContribution capability metadata를 등록합니다. spakky-auth의 startup validation은 이 metadata로 snapshot/password capability provider count를 검증합니다.

사용 예

import spakky.auth
import spakky.plugins.cryptography
from spakky.core.application.application import SpakkyApplication
from spakky.core.application.application_context import ApplicationContext

app = (
    SpakkyApplication(ApplicationContext())
    .load_plugins(
        include={
            spakky.auth.PLUGIN_NAME,
            spakky.plugins.cryptography.PLUGIN_NAME,
        }
    )
    .start()
)

개발 검증

패키지 단위 검증은 해당 패키지 디렉토리에서 실행합니다.

uv run ruff format .
uv run ruff check .
uv run pyrefly check
uv run pytest

pytest는 각 패키지 pyproject.toml의 coverage 설정을 사용합니다.

라이선스

MIT License

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (8.0.0)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for Spakky from gravatar.com Spakky

Credits

PyPI data
Data sourced directly from PyPI's database.

Author: Spakky

License

MIT

Requires

Python >=3.12

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

spakky_cryptography-7.1.1.tar.gz (14.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

spakky_cryptography-7.1.1-py3-none-any.whl (26.0 kB view details)

Uploaded Python 3

File details

Details for the file spakky_cryptography-7.1.1.tar.gz.

File metadata

  • Download URL: spakky_cryptography-7.1.1.tar.gz
  • Upload date:
  • Size: 14.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for spakky_cryptography-7.1.1.tar.gz
Algorithm Hash digest
SHA256 e035231125afd3ea8f2b8e3af0e24e670e7ab7a89a27b22344a0215b84ee2e37
MD5 cf2c7fa17160ccce8315047e0e953425
BLAKE2b-256 76c5122c98ed8ac8b29927b601e6a42f213a6e1c10f60bddd5387a54265c525b

See more details on using hashes here.

Provenance

The following attestation bundles were made for spakky_cryptography-7.1.1.tar.gz:

Publisher: release.yml on E5presso/spakky-framework

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file spakky_cryptography-7.1.1-py3-none-any.whl.

File metadata

File hashes

Hashes for spakky_cryptography-7.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 527947053989dfbb0536511b9d24d61aaf8591b70cfd6761d1c2b479d0f8b00a
MD5 ecdbd54d7e987ef9700b78cc14ce00c3
BLAKE2b-256 fcdfbd1a1e588430e2e670e661960712bdd00dc11c096414efb4b04bb8df40e9

See more details on using hashes here.

Provenance

The following attestation bundles were made for spakky_cryptography-7.1.1-py3-none-any.whl:

Publisher: release.yml on E5presso/spakky-framework

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page