Files
duty-teller/alembic/env.py
Nikolay Tatarinov 1948618394 Refactor configuration and enhance Telegram initData validation
- Improved formatting and readability in config.py and other files by adding line breaks.
- Introduced INIT_DATA_MAX_AGE_SECONDS to enforce replay protection for Telegram initData.
- Updated validate_init_data function to include max_age_seconds parameter for validation.
- Enhanced API to reject old initData based on the new max_age_seconds setting.
- Added tests for auth_date expiry and validation of initData in test_telegram_auth.py.
- Updated README with details on the new INIT_DATA_MAX_AGE_SECONDS configuration.
2026-02-17 17:31:20 +03:00

50 lines
1.3 KiB
Python

"""Alembic env: use config DATABASE_URL and db.models.Base."""
import os
import sys
from logging.config import fileConfig
from sqlalchemy import create_engine
from alembic import context
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
import config
from db.models import Base
config_alembic = context.config
if config_alembic.config_file_name is not None:
fileConfig(config_alembic.config_file_name)
database_url = config.DATABASE_URL
config_alembic.set_main_option("sqlalchemy.url", database_url)
target_metadata = Base.metadata
connect_args = {"check_same_thread": False} if "sqlite" in database_url else {}
def run_migrations_offline() -> None:
context.configure(
url=database_url,
target_metadata=target_metadata,
literal_binds=True,
dialect_opts={"paramstyle": "named"},
)
with context.begin_transaction():
context.run_migrations()
def run_migrations_online() -> None:
engine = create_engine(database_url, connect_args=connect_args)
with engine.connect() as connection:
context.configure(connection=connection, target_metadata=target_metadata)
with context.begin_transaction():
context.run_migrations()
if context.is_offline_mode():
run_migrations_offline()
else:
run_migrations_online()