iatoolkit 2.73.1__tar.gz → 2.73.2__tar.gz

{iatoolkit-2.73.1/src/iatoolkit.egg-info → iatoolkit-2.73.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iatoolkit
-Version: 2.73.1
+Version: 2.73.2
 Summary: IAToolkit
 Author: Fernando Libedinsky
 License-Expression: MIT

{iatoolkit-2.73.1 → iatoolkit-2.73.2}/src/iatoolkit/__init__.py

@@ -3,7 +3,7 @@
 #
 # IAToolkit is open source software.
 
-__version__ = "2.73.1"
+__version__ = "2.73.2"
 
 # Expose main classes and functions at the top level of the package
 

{iatoolkit-2.73.1 → iatoolkit-2.73.2}/src/iatoolkit/locales/en.yaml

@@ -649,6 +649,7 @@ ui:
     team_user_remove: "Remove from the company"
     team_user_remove_confirm: "Remove {email} from the company? They lose access at once; their account is not deleted."
     team_user_removed: "Person removed from the company."
+    team_user_unverified: "Account not verified"
     team_groups_edit: "Groups"
     team_groups_modal_title: "Person's groups"
     team_groups_save: "Save"

{iatoolkit-2.73.1 → iatoolkit-2.73.2}/src/iatoolkit/locales/es.yaml

@@ -663,6 +663,7 @@ ui:
     team_user_remove: "Quitar de la empresa"
     team_user_remove_confirm: "¿Quitar a {email} de la empresa? Pierde el acceso de inmediato; su cuenta no se borra."
     team_user_removed: "Persona quitada de la empresa."
+    team_user_unverified: "Cuenta sin verificar"
     team_groups_edit: "Grupos"
     team_groups_modal_title: "Grupos de la persona"
     team_groups_save: "Guardar"

{iatoolkit-2.73.1 → iatoolkit-2.73.2}/src/iatoolkit/services/auth_service.py

@@ -310,7 +310,8 @@ class AuthService:
         # check if the api-key is valid and active
         api_key_entry = self.api_key_service.get_active_api_key_entry(api_key)
         if not api_key_entry:
-            logging.error(f"Invalid or inactive IAToolkit API Key: {api_key}")
+            # Never the key itself: a mistyped or just-rotated key would end up in the logs.
+            logging.error("Invalid or inactive IAToolkit API Key: %s", self.key_fingerprint(api_key))
             return {"success": False,
                     "error_message": self.i18n_service.t('errors.auth.invalid_api_key'),
                     "status_code": 402}
@@ -346,6 +347,14 @@ class AuthService:
 
     SERVICE_PREFIX = "service:"
 
+    @staticmethod
+    def key_fingerprint(api_key: str) -> str:
+        """What a log may say about a key: its first characters and a short hash, enough to
+        match it against the API Keys screen without exposing it."""
+        value = str(api_key or "")
+        digest = hashlib.sha256(value.encode("utf-8")).hexdigest()[:12]
+        return f"prefix={value[:4]}… len={len(value)} sha256={digest}"
+
     @classmethod
     def service_principal(cls, api_key_entry) -> str:
         """The identity a key acts with by itself: "service:<key name>" (lowercase, dashes)."""

{iatoolkit-2.73.1 → iatoolkit-2.73.2/src/iatoolkit.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iatoolkit
-Version: 2.73.1
+Version: 2.73.2
 Summary: IAToolkit
 Author: Fernando Libedinsky
 License-Expression: MIT