libapi.py

import libuser
import random
import hashlib

from pathlib import Path


def keygen(username, password=None):
    if password:
        if not libuser.login(username, password):
            return None

    key = hashlib.sha256(str(random.getrandbits(2048)).encode()).hexdigest()

    for f in Path("/tmp/").glob("vulpy.apikey." + username + ".*"):
        print("removing", f)
        f.unlink()

    keyfile = f"/tmp/vulpy.apikey.{username}.{key}"

    Path(keyfile).touch()

    return key


def authenticate(request):
    if "X-APIKEY" not in request.headers:
        return None

    key = request.headers["X-APIKEY"]

    for f in Path("/tmp/").glob("vulpy.apikey.*." + key):
        return f.name.split(".")[2]

    return None