feat: add SRP authentication, improve security

- Replace RSA key exchange with SRP (Secure Remote Password)
- Password never transmitted over network
- Add unit tests for endpoints
- Fix datetime.UTC compatibility for Python < 3.11
- Fix logger.exception usage
- Update README with new auth flow diagram
This commit is contained in:
mirai
2026-01-02 23:09:00 +03:00
parent e3a3dd3f0f
commit 5cbe355660
26 changed files with 470 additions and 482 deletions
+7 -3
View File
@@ -4,9 +4,13 @@ from . import views
def register_routes(app: Sanic) -> None:
@app.route("/get_key", methods=["GET", "POST"])
async def get_key_route(request: Request):
return await views.get_key(request, app)
@app.post("/srp/init")
async def srp_init_route(request: Request):
return await views.srp_init(request, app)
@app.post("/srp/verify")
async def srp_verify_route(request: Request):
return await views.srp_verify(request, app)
@app.websocket("/ws/chat")
async def chat_ws_route(request: Request, ws: Websocket):