capyy 0.3.0__tar.gz → 0.3.1__tar.gz

{capyy-0.3.0/capyy.egg-info → capyy-0.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capyy
-Version: 0.3.0
+Version: 0.3.1
 Summary: Tiny encrypted JSON-over-TCP APIs: call a function in another program, on your Wi-Fi or across the internet
 Author: Izac
 License-Expression: MIT
@@ -81,6 +81,8 @@ Everything is encrypted by default, with nothing to configure.
   and prints its **fingerprint**.
 - Like SSH, a client **remembers a server's fingerprint** the first time (`~/.capy/known_hosts.json`)
   and raises `capy.SecurityError` if it ever changes.
+- The server logs every request, but **never secrets**: parameters whose name contains
+  `password`, `pwd`, `mdp`, `secret` or `token` are shown as `"***"`.
 - Use `tls=False` on **both** sides to talk in clear (faster on localhost).
 
 ## `capy.wifi` — find each other on the same network

{capyy-0.3.0 → capyy-0.3.1}/README.md

@@ -59,6 +59,8 @@ Everything is encrypted by default, with nothing to configure.
   and prints its **fingerprint**.
 - Like SSH, a client **remembers a server's fingerprint** the first time (`~/.capy/known_hosts.json`)
   and raises `capy.SecurityError` if it ever changes.
+- The server logs every request, but **never secrets**: parameters whose name contains
+  `password`, `pwd`, `mdp`, `secret` or `token` are shown as `"***"`.
 - Use `tls=False` on **both** sides to talk in clear (faster on localhost).
 
 ## `capy.wifi` — find each other on the same network

{capyy-0.3.0 → capyy-0.3.1}/capy/__init__.py

@@ -53,7 +53,7 @@ class Server:
                 conn.sendall((jsonlib.dumps(self.handle(line), ensure_ascii=False) + "\n").encode())
             except (OSError, ValueError):
                 return
-            print(f"{addr[0]} → {line.strip()}")
+            print(f"{addr[0]} → {_hide(line)}")
 
     # port 0 -> le système choisit un port libre
     def run(self, port=None):
@@ -75,6 +75,25 @@ class Server:
 
 
 # Renvoyer du JSON écrit en texte depuis une action
+# Paramètres jamais affichés dans le journal du serveur (mots de passe, tokens…)
+SECRETS = ("password", "passwd", "pwd", "mdp", "motdepasse", "secret", "token")
+
+
+# Une requête -> texte pour le journal, avec les secrets remplacés par "***"
+# Ex : {"action": "login", "password": "1234"} -> {"action": "login", "password": "***"}
+def _hide(line):
+    try:
+        request = jsonlib.loads(line) if isinstance(line, str) else dict(line)
+    except (ValueError, TypeError):
+        return str(line).strip()
+    if not isinstance(request, dict):
+        return str(line).strip()
+    for key in request:
+        if any(word in key.lower() for word in SECRETS):
+            request[key] = "***"
+    return jsonlib.dumps(request, ensure_ascii=False)
+
+
 # Ex : return capy.json('{"text": "Hello"}')
 def json(text):
     try:

{capyy-0.3.0 → capyy-0.3.1}/capy/network.py

@@ -366,7 +366,7 @@ class Server(capy.Server):
             channel.send({"id": message.get("id"), "response": response})
         except ConnectionError:
             return
-        _log(f"réseau → {jsonlib.dumps(message['request'], ensure_ascii=False)}")
+        _log(f"réseau → {capy._hide(message['request'])}")
 
 
 # ============================================================

{capyy-0.3.0 → capyy-0.3.1/capyy.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: capyy
-Version: 0.3.0
+Version: 0.3.1
 Summary: Tiny encrypted JSON-over-TCP APIs: call a function in another program, on your Wi-Fi or across the internet
 Author: Izac
 License-Expression: MIT
@@ -81,6 +81,8 @@ Everything is encrypted by default, with nothing to configure.
   and prints its **fingerprint**.
 - Like SSH, a client **remembers a server's fingerprint** the first time (`~/.capy/known_hosts.json`)
   and raises `capy.SecurityError` if it ever changes.
+- The server logs every request, but **never secrets**: parameters whose name contains
+  `password`, `pwd`, `mdp`, `secret` or `token` are shown as `"***"`.
 - Use `tls=False` on **both** sides to talk in clear (faster on localhost).
 
 ## `capy.wifi` — find each other on the same network

{capyy-0.3.0 → capyy-0.3.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "capyy"
-version = "0.3.0"
+version = "0.3.1"
 description = "Tiny encrypted JSON-over-TCP APIs: call a function in another program, on your Wi-Fi or across the internet"
 readme = "README.md"
 requires-python = ">=3.9"

{capyy-0.3.0 → capyy-0.3.1}/tests/test_capy.py

@@ -68,6 +68,12 @@ class TestHandle(unittest.TestCase):
         self.assertEqual(self.api.handle('{"action": "divide", "a": 1, "b": 0}'), {"erreur": "division by zero"})
         self.assertIn("erreur", self.api.handle('{"action": "divide"}'))
 
+    def test_hide_secrets(self):
+        line = '{"action": "login", "name": "Zoe", "password": "1234", "user_token": "abc"}'
+        self.assertEqual(capy._hide(line), '{"action": "login", "name": "Zoe", "password": "***", "user_token": "***"}')
+        self.assertEqual(capy._hide({"mdp": "x"}), '{"mdp": "***"}')
+        self.assertEqual(capy._hide("pas du json\n"), "pas du json")
+
 
 class TestValues(unittest.TestCase):
     data = {"city": "Paris", "temp": "18.5", "rain": "non", "days": [{"name": "lundi"}, {"name": "mardi"}]}