ce121cf0d0
new file: app.py new file: app/ali_oss.py new file: app/app.py new file: app/app_common.py new file: app/config.py new file: app/coze.py new file: app/generate_api.py new file: app/html_crypto.py new file: app/main.py new file: app/web_source/admin.html new file: app/web_source/brand.html new file: app/web_source/home.html new file: app/web_source/index.html new file: app/web_source/login.html new file: app_common.py new file: blueprints/__init__.py new file: blueprints/__pycache__/__init__.cpython-311.pyc new file: blueprints/__pycache__/__init__.cpython-39.pyc new file: blueprints/__pycache__/admin.cpython-311.pyc new file: blueprints/__pycache__/admin.cpython-39.pyc new file: blueprints/__pycache__/auth.cpython-311.pyc new file: blueprints/__pycache__/auth.cpython-39.pyc new file: blueprints/__pycache__/brand.cpython-311.pyc new file: blueprints/__pycache__/brand.cpython-39.pyc new file: blueprints/__pycache__/image.cpython-311.pyc new file: blueprints/__pycache__/image.cpython-39.pyc new file: blueprints/__pycache__/main.cpython-311.pyc new file: blueprints/__pycache__/main.cpython-39.pyc new file: blueprints/admin.py new file: blueprints/auth.py new file: blueprints/brand.py new file: blueprints/image.py new file: blueprints/main.py new file: brand_spider/__pycache__/main.cpython-39.pyc new file: brand_spider/__pycache__/web_dec.cpython-39.pyc new file: brand_spider/main.py new file: brand_spider/web_dec.py new file: config.py new file: coze.py new file: generate_api.py new file: html_crypto.py new file: main.py new file: static/bg.jpg new file: "static/\345\223\201\347\211\214\346\226\207\346\241\243\346\240\274\345\274\217_\346\250\241\346\235\277.xlsx" new file: "static/\346\250\241\346\235\2772-\344\273\245\346\226\207\344\273\266\345\244\271\346\226\271\345\274\217\344\270\212\344\274\240.zip" new file: tool/.device_id new file: tool/__pycache__/devices.cpython-311.pyc new file: tool/__pycache__/devices.cpython-39.pyc new file: tool/devices.py
69 lines
2.0 KiB
Python
69 lines
2.0 KiB
Python
"""
|
||
HTML 模板加密/解密模块
|
||
使用 AES (Fernet) 对 HTML 资源进行加密存储，运行时解密后渲染
|
||
"""
|
||
|
||
import base64
|
||
import os
|
||
|
||
from cryptography.fernet import Fernet
|
||
from cryptography.hazmat.primitives import hashes
|
||
from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
|
||
|
||
|
||
def _get_fernet_key() -> bytes:
|
||
"""从环境变量 HTML_ENCRYPT_KEY 派生 Fernet 密钥，若未设置则使用默认开发密钥"""
|
||
raw = os.environ.get(
|
||
"HTML_ENCRYPT_KEY",
|
||
"maixiang_html_encrypt_default_key_change_in_production",
|
||
)
|
||
# 使用 PBKDF2 派生 32 字节密钥，再转为 Fernet 所需的 base64url
|
||
kdf = PBKDF2HMAC(
|
||
algorithm=hashes.SHA256(),
|
||
length=32,
|
||
salt=b"maixiang_html_salt",
|
||
iterations=100000,
|
||
)
|
||
key_bytes = kdf.derive(raw.encode("utf-8"))
|
||
return base64.urlsafe_b64encode(key_bytes)
|
||
|
||
|
||
def encrypt(plain_data: bytes) -> bytes:
|
||
"""加密原始数据，返回密文（bytes）"""
|
||
key = _get_fernet_key()
|
||
f = Fernet(key)
|
||
return f.encrypt(plain_data)
|
||
|
||
|
||
def decrypt(encrypted_data: bytes) -> bytes:
|
||
"""解密数据，返回明文（bytes）"""
|
||
key = _get_fernet_key()
|
||
f = Fernet(key)
|
||
return f.decrypt(encrypted_data)
|
||
|
||
|
||
def encrypt_file(path: str) -> None:
|
||
"""就地加密文件：读取 UTF-8 内容，加密后写回同一路径"""
|
||
with open(path, "rb") as f:
|
||
plain = f.read()
|
||
encrypted = encrypt(plain)
|
||
with open(path, "wb") as f:
|
||
f.write(encrypted)
|
||
|
||
|
||
def decrypt_file(path: str) -> None:
|
||
"""就地解密文件：读取密文，解密后以 UTF-8 写回同一路径"""
|
||
with open(path, "rb") as f:
|
||
encrypted = f.read()
|
||
plain = decrypt(encrypted)
|
||
with open(path, "wb") as f:
|
||
f.write(plain)
|
||
|
||
|
||
def is_encrypted(data: bytes) -> bool:
|
||
"""简单启发式：Fernet 密文以 b'gAAAAA' 开头（base64 编码后）"""
|
||
try:
|
||
return data[:7] == b"gAAAAAB"
|
||
except Exception:
|
||
return False
|