Wrap minimum_valid_iat_time with our standard db encryption

thunderbird · Jan 12, 2024 · 314cd41 · 314cd41
1 parent de2dc65
commit 314cd41
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/backend/src/appointment/database/models.py b/backend/src/appointment/database/models.py
@@ -93,7 +93,7 @@ class Subscriber(Base):
     short_link_hash = Column(StringEncryptedType(String, secret, AesEngine, "pkcs5", length=255), index=False)
 
     # Only accept the times greater than the one specified in the `iat` claim of the jwt token
-    minimum_valid_iat_time = Column(DateTime, index=True)
+    minimum_valid_iat_time = Column('minimum_valid_iat_time', StringEncryptedType(DateTime, secret, AesEngine, "pkcs5", length=255))
 
     calendars = relationship("Calendar", cascade="all,delete", back_populates="owner")
     slots = relationship("Slot", cascade="all,delete", back_populates="subscriber")

diff --git a/...ations/versions/2024_01_09_1652-ad7cc2de5ff8_add_minimum_valid_iat_time_to_subscribers.py b/...ations/versions/2024_01_09_1652-ad7cc2de5ff8_add_minimum_valid_iat_time_to_subscribers.py
@@ -5,8 +5,15 @@
 Create Date: 2024-01-09 16:52:20.941572
 
 """
+import os
 from alembic import op
 import sqlalchemy as sa
+from sqlalchemy_utils import StringEncryptedType
+from sqlalchemy_utils.types.encrypted.encrypted_type import AesEngine
+
+
+def secret():
+    return os.getenv("DB_SECRET")
 
 
 # revision identifiers, used by Alembic.
@@ -17,7 +24,7 @@
 
 
 def upgrade() -> None:
-    op.add_column('subscribers', sa.Column('minimum_valid_iat_time', sa.DateTime, index=True))
+    op.add_column('subscribers', sa.Column('minimum_valid_iat_time', StringEncryptedType(sa.DateTime, secret, AesEngine, "pkcs5", length=255)))
 
 
 def downgrade() -> None: