entrouvert
/
authentic
16
0
Fork 0
Code Issues Pull Requests 33 Releases Activity

python3: encode oidc secret before calling crypto primitives (#31172)

This commit is contained in:
Paul Marillonnet 2019-02-07 10:33:50 +01:00
parent e06405d027
commit af95b1bb0a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/authentic2_idp_oidc/utils.py
View File

@ -140,14 +140,14 @@ def make_pairwise_reversible_sub_from_uuid(client, user_uuid):
return None
sector_identifier = get_sector_identifier(client)
return crypto.aes_base64url_deterministic_encrypt(
settings.SECRET_KEY, identifier, sector_identifier)
settings.SECRET_KEY.encode('utf-8'), identifier, sector_identifier).decode('utf-8')
def reverse_pairwise_sub(client, sub):
sector_identifier = get_sector_identifier(client)
try:
return crypto.aes_base64url_deterministic_decrypt(
settings.SECRET_KEY, sub, sector_identifier)
settings.SECRET_KEY.encode('utf-8'), sub, sector_identifier)
except crypto.DecryptionError:
return None