idk WIP

src/api/accounts.py

@@ -0,0 +1,33 @@
+from typing import Annotated
+
+from fastapi import APIRouter, Depends, HTTPException, status
+from psycopg2._psycopg import connection
+
+import db.accounts as db
+import settings.settings as settings
+from api.utils import get_password_hash
+from db.internal import get_db_connection
+
+accounts_router = APIRouter(prefix="/api/accounts", tags=["anon"])
+
+
+@accounts_router.post("/add/user")
+async def add_account(
+    platform: str,
+    login: str,
+    password: str,
+    metadata: dict,
+    conn: Annotated[connection, Depends(get_db_connection)]
+):
+    if not settings.settings.allow_create_users:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Not allowed",
+        )
+    if db.check_account_existence(conn, platform, login, password):
+        raise HTTPException(
+            status_code=status.HTTP_409_CONFLICT,
+            detail="Account already exists",
+        )
+    hashed_password = get_password_hash(password)
+    return db.create_user(conn, username, hashed_password, "user")

src/api/utils.py

@@ -3,6 +3,9 @@ from typing import Annotated
 
 import bcrypt
 import jwt
+from Crypto.Cipher import AES
+from Crypto.Random import get_random_bytes
+from Crypto.Util.Padding import pad, unpad
 from fastapi import Depends, HTTPException, status
 from fastapi.security import OAuth2PasswordBearer
 from jwt.exceptions import InvalidTokenError
@@ -17,6 +20,19 @@ from db.internal import get_db_connection
 oauth2_scheme = OAuth2PasswordBearer(tokenUrl="token")
 
 
+def encrypt_str(string, key_hex):
+    key = bytes.fromhex(key_hex)
+    cipher = AES.new(key, AES.MODE_ECB)  # Простейший режим (небезопасно для больших данных!)
+    encrypted_string = cipher.encrypt(pad(string.encode(), AES.block_size))
+    return encrypted_string
+
+def decrypt_str(encrypted_string, key_hex):
+    key = bytes.fromhex(key_hex)
+    cipher = AES.new(key, AES.MODE_ECB)
+    string = unpad(cipher.decrypt(encrypted_string), AES.block_size)
+    return string.decode()
+
+
 def verify_password(plain_password: str, hashed_password: str):
     return bcrypt.checkpw(plain_password.encode("utf-8"), hashed_password.encode("utf-8"))