Senko-san
7a17e3babd
Subsonic auth (t=md5(password+salt), legacy p=) needs a recoverable secret, but login passwords are stored as a one-way argon2 hash. Add a separate, per-user app-password: high-entropy, random, and encrypted at rest with a Fernet key derived from SUBSONIC_SECRET_KEY (never stored in the DB). - SubsonicPasswordCipher + generate_subsonic_password in core.security - users.subsonic_password_enc column (+ Alembic migration), repo + port methods - SubsonicAuthService: verify (t+s / p / p=enc:) and rotate/reveal lifecycle - self-service GET/POST /users/me/subsonic-password + admin rotate endpoint - domain SubsonicCredentials + SubsonicCipher port; deps wiring Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
23 lines
622 B
Python
23 lines
622 B
Python
"""Domain entities and value objects — pure, framework-free."""
|
|
|
|
from app.domain.entities.album import Album
|
|
from app.domain.entities.history import PlayHistoryEntry
|
|
from app.domain.entities.like import Like
|
|
from app.domain.entities.playlist import Playlist
|
|
from app.domain.entities.storage import ObjectStat
|
|
from app.domain.entities.track import Artist, Track
|
|
from app.domain.entities.user import Credentials, SubsonicCredentials, User
|
|
|
|
__all__ = [
|
|
"Album",
|
|
"Artist",
|
|
"Credentials",
|
|
"Like",
|
|
"ObjectStat",
|
|
"PlayHistoryEntry",
|
|
"Playlist",
|
|
"SubsonicCredentials",
|
|
"Track",
|
|
"User",
|
|
]
|