feat: add SRP authentication, improve security

- Replace RSA key exchange with SRP (Secure Remote Password)
- Password never transmitted over network
- Add unit tests for endpoints
- Fix datetime.UTC compatibility for Python < 3.11
- Fix logger.exception usage
- Update README with new auth flow diagram
This commit is contained in:
mirai
2026-01-02 23:09:00 +03:00
parent e3a3dd3f0f
commit 5cbe355660
26 changed files with 470 additions and 482 deletions
+4 -4
View File
@@ -28,8 +28,8 @@ class ConnectionManager:
continue
try:
await connection.send(message)
except Exception as e:
logger.warning(f"Failed to send message to {user_id}: {e}")
except Exception:
logger.exception(f"Failed to send message to {user_id}")
disconnected.append(user_id)
for user_id in disconnected:
@@ -42,7 +42,7 @@ class ConnectionManager:
try:
await connection.send(message)
return True
except Exception as e:
logger.warning(f"Failed to send personal message to {user_id}: {e}")
except Exception:
logger.exception(f"Failed to send personal message to {user_id}")
return False
return False