Encryptors 2.50__tar.gz → 2.51__tar.gz

{encryptors-2.50 → encryptors-2.51}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Encryptors
-Version: 2.50
+Version: 2.51
 Summary: End-to-end algorithm library
 Author: OSDental LLC
 Author-email: support@osdental.ai

{encryptors-2.50 → encryptors-2.51}/setup.py

@@ -2,7 +2,7 @@ from setuptools import setup, find_packages
 # ANDERSON REVISAR EL CACHE LOCAL DEL KEYVAULT PARA VALIDAR SI FUNCIONA
 setup(
     name="Encryptors", 
-    version="2.50",
+    version="2.51",
     author="OSDental LLC",
     author_email="support@osdental.ai",
     description="End-to-end algorithm library",

{encryptors-2.50 → encryptors-2.51}/src/Encryptors.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Encryptors
-Version: 2.50
+Version: 2.51
 Summary: End-to-end algorithm library
 Author: OSDental LLC
 Author-email: support@osdental.ai

{encryptors-2.50 → encryptors-2.51}/src/Osdental/Database/Connection.py

@@ -74,6 +74,17 @@ class Connection:
         self.initialized = True
         logger.info("db.connection_ready url=%s", self._safe_url(db_url))
 
+    @staticmethod
+    def _safe_url(db_url: str) -> str:
+        """Enmascara contraseñas del connection string para logging seguro."""
+        import re
+        return re.sub(
+            r"(password|pwd)=[^;]+",
+            r"\1=***",
+            db_url,
+            flags=re.IGNORECASE
+        )
+
     def _ensure_connection_resiliency(self, db_url: str) -> str:
         """
         Agrega parámetros resilientes por defecto para Azure SQL

{encryptors-2.50 → encryptors-2.51}/src/Osdental/Helpers/JwtTokenHelper.py

@@ -3,8 +3,10 @@ from datetime import datetime, timedelta, timezone
 from jwcrypto import jwk
 from jwcrypto import jwt
 from jwcrypto import jwe
+from jwcrypto.jwt import JWTExpired
 from Osdental.Models.TokenClaims import TokenValidationOptions
-
+from Osdental.Exception.ControlledException import UnauthorizedException
+from Osdental.Shared.Enums.StatusCode import StatusCode
 
 class JwtTokenHelper:
 
@@ -78,37 +80,43 @@ class JwtTokenHelper:
         Desencripta y verifica firma.
 
         NO valida:
-        - expiration
         - issuer
         - audience
 
         Retorna claims incluso si el token está expirado.
         """
 
-        encrypted = jwe.JWE()
+        try:
+            encrypted = jwe.JWE()
 
-        encrypted.deserialize(
-            token
-        )
+            encrypted.deserialize(
+                token
+            )
 
-        encrypted.decrypt(
-            self._private_key
-        )
+            encrypted.decrypt(
+                self._private_key
+            )
 
-        inner_token = (
-            encrypted.payload.decode()
-        )
+            inner_token = (
+                encrypted.payload.decode()
+            )
 
-        verified = jwt.JWT()
+            verified = jwt.JWT()
 
-        verified.deserialize(
-            jwt=inner_token,
-            key=self._public_key,
-        )
+            verified.deserialize(
+                jwt=inner_token,
+                key=self._public_key,
+            )
 
-        return json.loads(
-            verified.claims
-        )
+            return json.loads(
+                verified.claims
+            )
+        
+        except JWTExpired:
+            raise UnauthorizedException(
+                message="Token expired",
+                status_code=StatusCode.UNAUTHORIZED
+            )
 
     def validate_claims(
         self,
@@ -143,26 +151,6 @@ class JwtTokenHelper:
                 )
 
 
-        if options.validate_expiration:
-
-            exp = claims.get("exp")
-
-            if exp is None:
-                raise ValueError(
-                    "exp claim not found"
-                )
-
-            now = int(
-                datetime.now(
-                    timezone.utc
-                ).timestamp()
-            )
-
-            if now > exp:
-                raise ValueError(
-                    "Token expired"
-                )
-
     def validate_token(
         self,
         token: str,

{encryptors-2.50 → encryptors-2.51}/src/Osdental/Models/TokenClaims.py

@@ -7,7 +7,6 @@ class TokenValidationOptions:
     issuer: Optional[str] = None
     audience: Optional[str] = None
 
-    validate_expiration: bool = True
     validate_issuer: bool = True
     validate_audience: bool = True