a signing key extension for sqlalchemy
Project description
sqlalchemy_signing
a signing key extension for sqlalchemy
About
The sqlalchemy_signing library is a useful tool for Python applications using sqlalchemy that require secure and robust management of signing keys. It grew out of the Flask-Signing project, which was more tightly coupled to the Flask framework. Do you need to generate single-use tokens for one-time actions like email verification or password reset? sqlalchemy_signing can handle that. Are you looking for a simple method for managing API keys? Look no further.
Installation
First, install the sqlalchemy_signing package. You can do this with pip:
pip install sqlalchemy_signing
Basic Usage
After you've installed the sqlalchemy_signing package, you can use it in your Flask application. Here's an example of how you might do this:
from sqlalchemy_signing import (
Signatures,
RateLimitExceeded
)
app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite://' # Use your actual database URI
app.secret_key = "Your_Key_Here"
with app.app_context():
signatures = Signatures(app.config['SQLALCHEMY_DATABASE_URI'], byte_len=24)
@app.route('/sign')
def sign():
key = signatures.write_key(scope='test', expiration=1, active=True, email='test@example.com')
return f'Key generated: {key}'
@app.route('/verify/<key>')
def verify(key):
try:
valid = signatures.verify_key(signature=key, scope='test')
return f'Key valid: {valid}'
except RateLimitExceeded:
return "Rate limit exceeded"
@app.route('/expire/<key>')
def expire(key):
expired = signatures.expire_key(key)
return f'Key expired: {expired}'
@app.route('/all')
def all():
all = signatures.get_all()
return f'Response: {all}'
In this basic example, a new signing key is generated and written to the database when you visit the /sign
route, and the key is displayed on the page. Then, when you visit the /verify/<key>
route (replace with the actual key), the validity of the key is checked and displayed. You can expire a key using the /expire/<key>
route, and view all records with the /all
route.
This is a rather basic example and your actual use of the sqlalchemy_signing package may be more complex depending on your needs. It's important to secure your signing keys and handle them appropriately according to your application's security requirements. Further usage examples can be found in the examples directory of the sqlalchemy_signing Github repository.
Developers
Contributions are welcome! You can read the developer docs at https://signebedi.github.io/sqlalchemy_signing. If you're interested, review (or add to) the feature ideas at https://github.com/signebedi/sqlalchemy_signing/issues.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for sqlalchemy_signing-1.0.3-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | e812a09a3810144e3c8594fa1f8a2e1549168df147d7ec052a93a3af6881300b |
|
MD5 | f8f32655a5cdad202e83bba13211e006 |
|
BLAKE2b-256 | 7dc45c1452d163bb35d9c70800005d16ae0b1d7aac1c5ec2dfe9c0cd4a49e629 |