- Improved formatting and readability in config.py and other files by adding line breaks. - Introduced INIT_DATA_MAX_AGE_SECONDS to enforce replay protection for Telegram initData. - Updated validate_init_data function to include max_age_seconds parameter for validation. - Enhanced API to reject old initData based on the new max_age_seconds setting. - Added tests for auth_date expiry and validation of initData in test_telegram_auth.py. - Updated README with details on the new INIT_DATA_MAX_AGE_SECONDS configuration.
50 lines
1.3 KiB
Python
50 lines
1.3 KiB
Python
"""Alembic env: use config DATABASE_URL and db.models.Base."""
|
|
|
|
import os
|
|
import sys
|
|
from logging.config import fileConfig
|
|
|
|
from sqlalchemy import create_engine
|
|
from alembic import context
|
|
|
|
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
|
|
|
|
import config
|
|
from db.models import Base
|
|
|
|
config_alembic = context.config
|
|
if config_alembic.config_file_name is not None:
|
|
fileConfig(config_alembic.config_file_name)
|
|
|
|
database_url = config.DATABASE_URL
|
|
config_alembic.set_main_option("sqlalchemy.url", database_url)
|
|
|
|
target_metadata = Base.metadata
|
|
|
|
connect_args = {"check_same_thread": False} if "sqlite" in database_url else {}
|
|
|
|
|
|
def run_migrations_offline() -> None:
|
|
context.configure(
|
|
url=database_url,
|
|
target_metadata=target_metadata,
|
|
literal_binds=True,
|
|
dialect_opts={"paramstyle": "named"},
|
|
)
|
|
with context.begin_transaction():
|
|
context.run_migrations()
|
|
|
|
|
|
def run_migrations_online() -> None:
|
|
engine = create_engine(database_url, connect_args=connect_args)
|
|
with engine.connect() as connection:
|
|
context.configure(connection=connection, target_metadata=target_metadata)
|
|
with context.begin_transaction():
|
|
context.run_migrations()
|
|
|
|
|
|
if context.is_offline_mode():
|
|
run_migrations_offline()
|
|
else:
|
|
run_migrations_online()
|