From d7817975551283c28f8df3c432b2f1d4480e84ac Mon Sep 17 00:00:00 2001 From: wxg0103 <727495428@qq.com> Date: Fri, 11 Jul 2025 19:47:32 +0800 Subject: [PATCH] refactor: remove encryption from sensitive fields in auth_config_serializer and related modules --- apps/common/utils/common.py | 31 ------------------------------- 1 file changed, 31 deletions(-) diff --git a/apps/common/utils/common.py b/apps/common/utils/common.py index 85c0215fd..128f32da4 100644 --- a/apps/common/utils/common.py +++ b/apps/common/utils/common.py @@ -24,9 +24,6 @@ from pydub import AudioSegment from ..database_model_manage.database_model_manage import DatabaseModelManage from ..exception.app_exception import AppApiException -from Crypto.Cipher import AES -from Crypto.Util.Padding import pad, unpad -from base64 import b64encode, b64decode def password_encrypt(row_password): @@ -90,34 +87,6 @@ def encryption(message: str): return pre_str + content + end_str -key = b'J\xbb\xd1\xa3\x93zB\x80/\xf2\x89e\xecb\xfe\x02' - - -def encrypt(message: str) -> str: - cipher = AES.new(key, AES.MODE_CBC) - ct_bytes = cipher.encrypt(pad(message.encode('utf-8'), AES.block_size)) - iv = b64encode(cipher.iv).decode('utf-8') - ct = b64encode(ct_bytes).decode('utf-8') - return f"{iv}:{ct}" - - -def decrypt(encrypted: str) -> str: - try: - # 判断是否为加密格式 (iv:ciphertext) - if ':' not in encrypted: - return encrypted # 非加密字符串直接返回 - - iv_str, ct_str = encrypted.split(":", 1) - iv = b64decode(iv_str) - ct = b64decode(ct_str) - cipher = AES.new(key, AES.MODE_CBC, iv) - pt = unpad(cipher.decrypt(ct), AES.block_size) - return pt.decode('utf-8') - except (ValueError, KeyError, IndexError, Exception): - # 捕获所有可能的异常,如无效格式、密钥错误等 - return encrypted # 如果解密失败,返回原字符串 - - def _remove_empty_lines(text): if not isinstance(text, str): raise AppApiException(500, _('Text-to-speech node, the text content must be of string type'))