Function issue_totp_trusted_device

astrbot/core/utils/totp.py:184–210

Issue a trusted device token, save to DB, and return the raw token for cookie.

(config, db)

async def issue_totp_trusted_device(config, db) -> str | None:
    """Issue a trusted device token, save to DB, and return the raw token for cookie."""
    raw_token = secrets.token_urlsafe(48)
    token_hash = _hash_totp_trusted_device_token(config, raw_token)
    totp_secret_hash = _hash_totp_secret(config)
    if not token_hash or not totp_secret_hash:
        return None

    expires_at = datetime.datetime.now(datetime.timezone.utc) + datetime.timedelta(
        seconds=TOTP_TRUSTED_DEVICE_MAX_AGE
    )
    async with db.get_db() as session:
        async with session.begin():
            await session.execute(
                delete(DashboardTrustedDevice).where(
                    col(DashboardTrustedDevice.token_hash) == token_hash
                )
            )
            trusted_device = DashboardTrustedDevice.model_validate(
                {
                    "token_hash": token_hash,
                    "totp_secret_hash": totp_secret_hash,
                    "expires_at": expires_at,
                }
            )
            session.add(trusted_device)
    return raw_token


async def _cleanup_expired_totp_trusted_devices(db) -> None: