python-neva 0.5.0__tar.gz → 0.6.0.dev2__tar.gz

{python_neva-0.5.0 → python_neva-0.6.0.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-neva
-Version: 0.5.0
+Version: 0.6.0.dev2
 Summary: Add your description here
 Requires-Python: >=3.12
 Requires-Dist: cryptography>=46.0.3

{python_neva-0.5.0 → python_neva-0.6.0.dev2}/neva/security/__init__.py

@@ -3,6 +3,7 @@
 from neva.security.encryption import AesEncrypter, DecryptionError, Encrypter
 from neva.security.hashing import Argon2Hasher, BcryptHasher, HashManager, Hasher
 from neva.security.provider import SecurityProvider
+from neva.security.tokens import hash_token, verify_token
 
 __all__ = [
     "AesEncrypter",
@@ -13,4 +14,6 @@ __all__ = [
     "HashManager",
     "Hasher",
     "SecurityProvider",
+    "hash_token",
+    "verify_token",
 ]

{python_neva-0.5.0 → python_neva-0.6.0.dev2}/neva/security/hashing/config.py

@@ -6,18 +6,18 @@ from typing import Literal, NotRequired, TypedDict
 class BcryptConfig(TypedDict):
     """Bcrypt hasher config."""
 
-    rounds: int
-    prefix: str
+    rounds: NotRequired[int]
+    prefix: NotRequired[Literal["2a", "2b"]]
 
 
 class Argon2Config(TypedDict):
     """Argon2 hasher config."""
 
-    time_cost: int
-    memory_cost: int
-    parallelism: int
-    hash_len: int
-    salt_len: int
+    time_cost: NotRequired[int]
+    memory_cost: NotRequired[int]
+    parallelism: NotRequired[int]
+    hash_len: NotRequired[int]
+    salt_len: NotRequired[int]
 
 
 class HashingConfig(TypedDict):

{python_neva-0.5.0 → python_neva-0.6.0.dev2}/neva/security/hashing/hash_manager.py

@@ -22,15 +22,15 @@ class HashManager(StrategyResolver[Hasher]):
         """
         super().__init__(app)
 
-        self.register("argon2", self._create_argon2_hasher)
-        self.register("bcrypt", self._create_bcrypt_hasher)
+        _ = self.register("argon2", self._create_argon2_hasher)
+        _ = self.register("bcrypt", self._create_bcrypt_hasher)
 
     @override
     def default(self) -> Option[str]:
         """Get the default hasher from configuration.
 
         Returns:
-            Option containing the default hasher name ("argon2" or "bcrypt").
+            Option containing the default hasher name.
         """
         config_result = self.app.make(ConfigRepository)
         if config_result.is_err:

python_neva-0.6.0.dev2/neva/security/tokens/__init__.py

@@ -0,0 +1,5 @@
+"""Token hashing utilities for secure token storage."""
+
+from neva.security.tokens.token_hash import hash_token, verify_token
+
+__all__ = ["hash_token", "verify_token"]

python_neva-0.6.0.dev2/neva/security/tokens/token_hash.py

@@ -0,0 +1,30 @@
+"""Token hashing utilities."""
+
+import hashlib
+import hmac
+
+
+def hash_token(token: str | bytes) -> str:
+    """Hash a secure random token for storage.
+
+    Args:
+        token: The token to hash.
+
+    Returns:
+        Hex-encoded hash of the token.
+    """
+    data = token.encode() if isinstance(token, str) else token
+    return hashlib.sha256(data).hexdigest()
+
+
+def verify_token(token: str | bytes, hashed: str) -> bool:
+    """Verify a token against its stored hash.
+
+    Args:
+        token: The plaintext token to verify.
+        hashed: The stored hash to verify against.
+
+    Returns:
+        True if the token matches, False otherwise.
+    """
+    return hmac.compare_digest(hash_token(token), hashed)

{python_neva-0.5.0 → python_neva-0.6.0.dev2}/pyproject.toml

@@ -7,7 +7,7 @@ packages = ["neva"]
 
 [project]
 name = "python-neva"
-version = "0.5.0"
+version = "0.6.0.dev2"
 description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.12"

{python_neva-0.5.0 → python_neva-0.6.0.dev2}/uv.lock

@@ -1267,7 +1267,7 @@ wheels = [
 
 [[package]]
 name = "python-neva"
-version = "0.5.0"
+version = "0.6.0.dev2"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },