Introduced fernet to credential manager. Closes #183

src/cpl-auth/cpl/auth/schema/_administration/api_key.py

@@ -1,25 +1,27 @@
 import secrets
 from datetime import datetime
-from typing import Optional
+from typing import Optional, Union
 
 from async_property import async_property
 
 from cpl.auth.permission.permissions import Permissions
-from cpl.core.environment import Environment
-from cpl.core.log import Logger
-from cpl.core.typing import SerialId, Id
-from cpl.database.abc import DbModelABC
-from cpl.dependency import ServiceProviderABC
+from cpl.core.environment.environment import Environment
+from cpl.core.log.logger import Logger
+from cpl.core.typing import Id, SerialId
+from cpl.core.utils.credential_manager import CredentialManager
+from cpl.database.abc.db_model_abc import DbModelABC
+from cpl.dependency.service_provider_abc import ServiceProviderABC
 
 _logger = Logger(__name__)
 
 
 class ApiKey(DbModelABC):
+
     def __init__(
         self,
         id: SerialId,
         identifier: str,
-        key: str,
+        key: Union[str, bytes],
         deleted: bool = False,
         editor_id: Optional[Id] = None,
         created: Optional[datetime] = None,
@@ -37,12 +39,17 @@ class ApiKey(DbModelABC):
     def key(self) -> str:
         return self._key
 
+    @property
+    def plain_key(self) -> str:
+        return CredentialManager.decrypt(self.key)
+
     @async_property
     async def permissions(self):
         from cpl.auth.schema._permission.api_key_permission_dao import ApiKeyPermissionDao
 
-        api_key_permission_dao: ApiKeyPermissionDao = ServiceProviderABC.get_global_service(ApiKeyPermissionDao)
-        return [await x.permission for x in await api_key_permission_dao.find_by_api_key_id(self.id)]
+        apiKeyPermissionDao = ServiceProviderABC.get_global_provider().get_service(ApiKeyPermissionDao)
+
+        return [await x.permission for x in await apiKeyPermissionDao.find_by_api_key_id(self.id)]
 
     async def has_permission(self, permission: Permissions) -> bool:
         return permission.value in [x.name for x in await self.permissions]
@@ -52,7 +59,7 @@ class ApiKey(DbModelABC):
 
     @staticmethod
     def new_key() -> str:
-        return f"api_{secrets.token_urlsafe(Environment.get("API_KEY_LENGTH", int, 64))}"
+        return CredentialManager.encrypt(f"api_{secrets.token_urlsafe(Environment.get("API_KEY_LENGTH", int, 64))}")
 
     @classmethod
     def new(cls, identifier: str) -> "ApiKey":