Fixed issue encryption

Author: Systemaker

app/helpers.py

@@ -66,15 +66,14 @@ class SecurityTool(object):
  """
  Security tool : secret key generator and encode, encrypt, hash tools
  """
- __fernet_key = Fernet.generate_key()
- __cipher_suite = Fernet(__fernet_key)
 
- #def __init__(self):
- # Fernet : symmetric encryption
- # Fernet.generate_key : Generates a fresh fernet key. This must be kept secret. Keep this some place safe!
- # If you lose it you’ll no longer be able to decrypt messages;
- # Anyone with this key is able to create and read messages.
+ __cipher_suite = Fernet(app.config['FERNET_SECRET_KEY'])
 
+ # def __init__(self):
+ # Fernet : symmetric encryption
+ # FERNET SECRET KEY for encryption : This must be kept secret. Keep this some place safe!
+ # If you lose it you’ll no longer be able to decrypt messages and anyone with this key is able to create and read messages.
+ # __cipher_suite = Fernet(app.config['FERNET_SECRET_KEY'])
  # override to prevent peeking
  # self.__dict__ = {}
 

config.py

@@ -36,6 +36,8 @@ class BaseConfig(object):
  # secret key used also for csrf_token
  SECRET_KEY = 'write-a-secret-string-here-or-in-the-instance-secret-folder'
 
+ # Fernet key for encryption must be 32 url-safe base64-encoded bytes
+ FERNET_SECRET_KEY = 'write-a-secret-string-here-or-in-the-instance-secret-folder'
 
  LISTINGS_PER_PAGE = 5