howler-api 4.0.10.dev1483__tar.gz → 4.0.11.dev1550__tar.gz

{howler_api-4.0.10.dev1483 → howler_api-4.0.11.dev1550}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: howler-api
-Version: 4.0.10.dev1483
+Version: 4.0.11.dev1550
 Summary: Howler - API server
 License: MIT
 Keywords: howler,alerting,gc,canada,cse-cst,cse,cst,cyber,cccs

{howler_api-4.0.10.dev1483 → howler_api-4.0.11.dev1550}/howler/services/action_service.py

@@ -3,6 +3,7 @@ from collections import defaultdict
 from importlib.util import find_spec
 from typing import Any, Optional, TypedDict
 
+from cryptography.exceptions import InvalidTag
 from flask import Response, has_request_context, request
 
 from howler import actions
@@ -144,6 +145,13 @@ def process_action_batch(trigger: str, items: list[TriggeredAction]) -> None:
         uname = item.get("uname")
         try:
             auth_token = auth_service.decrypt_token(item.get("auth_token"))
+        except InvalidTag:
+            logger.exception(
+                "Queued authorization token for user=%s was encrypted with a different key. "
+                "Ensure all Howler instances sharing persistent Redis use the same system.encryption_key.",
+                uname,
+            )
+            auth_token = None
         except Exception:
             logger.exception("Unable to decrypt queued authorization token for user=%s", uname)
             auth_token = None

{howler_api-4.0.10.dev1483 → howler_api-4.0.11.dev1550}/pyproject.toml

@@ -152,7 +152,7 @@ suppress-none-returning = true
 [tool.poetry]
 package-mode = true
 name = "howler-api"
-version = "4.0.10.dev1483"
+version = "4.0.11.dev1550"
 description = "Howler - API server"
 authors = [
     "Canadian Centre for Cyber Security <howler@cyber.gc.ca>",