Package: django-user-secrets
Store user secrets encrypted into database.github.com/jedie/django-user-secrets/actionsCurrent project state: “Beta”Licence: GPL v3 or abovethe ideaStore a user’s secrets in the database encrypted with his password.Only the user can decrypt the stored data. His password is used for encryption and decryption. This password is only transmitted in plain text when logging in (Django itself only saves a salted hash of the password).The intermediate-user-secret is decrypted and stored with the clear text password in RAM after successful login. All user secrets will be encrypted and decrypted with his intermediate-user-secret.Limitations and/or facts:Only the same user can decrypt his own data.The decrypted data can only be used during an active session.A intermediate-user-secret is used, so that a password can be changed without losing the encrypted data.usageThe encrypted user secrets are stored viaEncryptedFieldin the user model. Your project must implement a ownsettings.AUTH_USER_MODELinherith fromAbstractUserSecretsModele.g.:/your_project/your_app/models.pyfrom user_secrets.model_fields import EncryptedField
from user_secrets.models import AbstractUserSecretsModel

class UserSecretsModel(AbstractUserSecretsModel):
    example_secret = EncryptedField(max_length=256, blank=True, null=True)  # can have one or more EncryptedField's!Add this own user model to the Django Admin and add the ownEncryptedField, so the user can fill it in the admin, e.g.:/your_project/your_app/admin.pyfrom django.contrib import admin
from django.utils.translation import gettext_lazy as _

from user_secrets.admin import UserSecretsAdmin
from user_secrets_tests.models import UserSecretsModel


@admin.register(UserSecretsModel)
class ExampleModelAdmin(UserSecretsAdmin):
    fieldsets = (
        (None, {'fields': ('username', 'password')}),
        (_('User Secrets'), {'fields': ('encrypted_secret', 'example_secret')}),  # <<< own fields
        (_('Personal info'), {'fields': ('first_name', 'last_name', 'email')}),
        (_('Permissions'), {
            'fields': ('is_active', 'is_staff', 'is_superuser', 'groups', 'user_permissions'),
        }),
        (_('Important dates'), {'fields': ('last_login', 'date_joined')}),
    )It’s also possible to implement a own “edit” view just for theEncryptedFieldvalues. Have a look at the demo app view:/user_secrets_tests/views/edit.pyFor this you can easy geta model form, e.g.:from user_secrets.forms import UserSecretsBaseModelModelForm
from user_secrets_tests.models import UserSecretsModel


class ExampleModelForm(UserSecretsBaseModelModelForm):
    class Meta:
        model = UserSecretsModel
        fields = ['example_secret']To use the stored secret in a view, e.g.:user = request.user  # get current user
example_secret = user.example_secret  # the the example field value (encrypted)
# decrypt the example
decrypted_value = user_decrypt(user=user, encrypted_data=example_secret)
# ...do something with the value...Complete example is:/user_secrets_tests/views/display.pyNeeded settings:# The SECRET_KEY should never changed after django-user-secrets are created!
SECRET_KEY = 'Use a long random string and keep this value secret!'

INSTALLED_APPS = (
    #...
    'user_secrets.apps.UserSecretsConfig',
    #...
)

# Must point to a own UserModel class
# This class must inherit from user_secrets.models.AbstractUserSecretsModel
AUTH_USER_MODEL = 'your_app.YourUserModel'


AUTHENTICATION_BACKENDS = [
    'user_secrets.auth_backend.UserSecretsAuthBackend',  # Must be at first
    'django.contrib.auth.backends.ModelBackend'
]


CACHES = {
    'default': {  # Can use any backend.
        'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
        'LOCATION': 'default',
    },
    'user_secrets': {  # Should be use the LocMemCache!
        'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
        'LOCATION': 'user_secrets',
    }
}


MIDDLEWARE = (
    #...
    'user_secrets.middleware.UserSecretsMiddleware',  # inserted after AuthenticationMiddleware
)Complete example is:/user_secrets_tests/settings.pyDEMOPrepare:install poetrye.g.:~$ sudo apt install python3-pip
~$ pip3 install -U pip --user
~$ pip3 install -U poerty --userClone the sources, e.g.:~$ git clone https://github.com/jedie/django-user-secrets.git
~$ cd django-user-secrets

# install via poetry:
~/django-user-secrets$ poetry install

# Start Django dev. server:
~/django-user-secrets$ poetry run dev_serverYou can also use our Makefile, e.g.:~/django-user-secrets$ make help
help                 List all commands
install-poetry       install or update poetry
install              install django-user-secrets via poetry
update               update the sources and installation
lint                 Run code formatters and linter
fix-code-style       Fix code formatting
tox-listenvs         List all tox test environments
tox                  Run pytest via tox with all environments
tox-py36             Run pytest via tox with *python v3.6*
tox-py37             Run pytest via tox with *python v3.7*
tox-py38             Run pytest via tox with *python v3.8*
pytest               Run pytest
update-rst-readme    update README.rst from README.creole
publish              Release new version to PyPi
start-dev-server     Start Django dev. server with the test projectAlternative/Related projects:https://github.com/erikvw/django-crypto-fieldshttps://github.com/incuna/django-pgcrypto-fieldshttps://github.com/georgemarshall/django-cryptography(Random order: No prioritization)history*dev*TBCv0.2.0 - 06.07.2020refactor:Move EncryptedFields into user model and don’t use a extra model for themMove code parts from demo app into main packageUpdate demo appupdate READMEBugfix Makefilev0.1.0 - 04.07.2020first release on PyPiNote: this file is generated from README.creole2020-07-0611:30:39 with"python-creole"