vodorod/Dorod-Sky
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

make signature algorithm configurable (#7)

Browse Source
This commit is contained in:
Shuchang Zheng
2024-03-03 17:01:14 -05:00
committed by GitHub
parent 6f7eb006d5
commit 2123b2da31
2 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
skyvern/config.py
View File

@@ -29,7 +29,10 @@ class Settings(BaseSettings):
JSON_LOGGING: bool = False JSON_LOGGING: bool = False
PORT: int = 8000 PORT: int = 8000
# Secret key for JWT. Please generate your own secret key in production
SECRET_KEY: str = "RX1NvhujcJqBPi8O78-7aSfJEWuT86-fll4CzKc_uek" SECRET_KEY: str = "RX1NvhujcJqBPi8O78-7aSfJEWuT86-fll4CzKc_uek"
# Algorithm used to sign the JWT
SIGNATURE_ALGORITHM: str = "HS256"
ACCESS_TOKEN_EXPIRE_MINUTES: int = 60 * 24 * 7 # one week ACCESS_TOKEN_EXPIRE_MINUTES: int = 60 * 24 * 7 # one week
SKYVERN_API_KEY: str = "SKYVERN_API_KEY" SKYVERN_API_KEY: str = "SKYVERN_API_KEY"

9
skyvern/forge/sdk/core/security.py
View File

@@ -5,10 +5,9 @@ from typing import Any, Union
from jose import jwt from jose import jwt
from skyvern.config import settings
from skyvern.forge.sdk.settings_manager import SettingsManager from skyvern.forge.sdk.settings_manager import SettingsManager
ALGORITHM = "HS256"
def create_access_token( def create_access_token(
subject: Union[str, Any], subject: Union[str, Any],
@@ -21,7 +20,11 @@ def create_access_token(
minutes=SettingsManager.get_settings().ACCESS_TOKEN_EXPIRE_MINUTES, minutes=SettingsManager.get_settings().ACCESS_TOKEN_EXPIRE_MINUTES,
) )
to_encode = {"exp": expire, "sub": str(subject)} to_encode = {"exp": expire, "sub": str(subject)}
encoded_jwt = jwt.encode(to_encode, SettingsManager.get_settings().SECRET_KEY, algorithm=ALGORITHM) encoded_jwt = jwt.encode(
to_encode,
SettingsManager.get_settings().SECRET_KEY,
algorithm=settings.SIGNATURE_ALGORITHM,
)
return encoded_jwt return encoded_jwt