mirror of
https://github.com/hanzoai/insights.git
synced 2026-10-30 16:15:31 +00:00
zeekay
bc4ddf332b
Mechanically re-derived: bin/debrand runs over a fresh import of posthog/posthog@fa1a9a60d4 (2026-08-06). The pipeline (.hanzo/workflows), the Dockerfiles and bin/docker* entrypoints, compose files, LLM.md and the squashed initial migration are restored from the shipped tree, same as the previous import. The prune's import-closure guard kept 21 products the new core now imports; dropping them is a refactor now, recorded rather than forced.
64 lines
2.2 KiB
Python
64 lines
2.2 KiB
Python
import hmac
|
|
import base64
|
|
import hashlib
|
|
from typing import Literal
|
|
|
|
|
|
def encode_digest(encoding: Literal["hex", "base64", "base64url", "binary"], digest: bytes) -> str:
|
|
if encoding == "hex":
|
|
return digest.hex()
|
|
elif encoding == "base64":
|
|
return base64.b64encode(digest).decode()
|
|
elif encoding == "base64url":
|
|
return base64.urlsafe_b64encode(digest).decode().rstrip("=")
|
|
elif encoding == "binary":
|
|
return digest.decode("latin1")
|
|
|
|
|
|
def md5(data: str | None, encoding: Literal["hex", "base64", "base64url", "binary"] = "hex") -> str | None:
|
|
if data is None:
|
|
return None
|
|
# nosemgrep: python.lang.security.insecure-hash-algorithms-md5.insecure-hash-algorithm-md5
|
|
digest = hashlib.md5(data.encode()).digest()
|
|
|
|
return encode_digest(encoding, digest)
|
|
|
|
|
|
def sha256(data: str | None, encoding: Literal["hex", "base64", "base64url", "binary"] = "hex") -> str | None:
|
|
if data is None:
|
|
return None
|
|
digest = hashlib.sha256(data.encode()).digest()
|
|
|
|
return encode_digest(encoding, digest)
|
|
|
|
|
|
def sha1(data: str | None, encoding: Literal["hex", "base64", "base64url", "binary"] = "hex") -> str | None:
|
|
if data is None:
|
|
return None
|
|
# SHA-1 is only here because vendors sign webhooks with it. Never pick it for new work.
|
|
# nosemgrep: python.lang.security.insecure-hash-algorithms.insecure-hash-algorithm-sha1
|
|
digest = hashlib.sha1(data.encode()).digest()
|
|
|
|
return encode_digest(encoding, digest)
|
|
|
|
|
|
def _hmac_chain(data: list, digestmod: str, encoding: Literal["hex", "base64", "base64url", "binary"]) -> str:
|
|
if len(data) < 2:
|
|
raise ValueError("Data array must contain at least two elements.")
|
|
|
|
hmac_obj = hmac.new(data[0].encode(), data[1].encode(), digestmod)
|
|
for i in range(2, len(data)):
|
|
hmac_obj = hmac.new(hmac_obj.digest(), data[i].encode(), digestmod)
|
|
|
|
digest = hmac_obj.digest()
|
|
|
|
return encode_digest(encoding, digest)
|
|
|
|
|
|
def sha256HmacChain(data: list, encoding: Literal["hex", "base64", "base64url", "binary"] = "hex") -> str:
|
|
return _hmac_chain(data, "sha256", encoding)
|
|
|
|
|
|
def sha1HmacChain(data: list, encoding: Literal["hex", "base64", "base64url", "binary"] = "hex") -> str:
|
|
return _hmac_chain(data, "sha1", encoding)
|