Method get_auth_status

auth_manager.py:288–329

Get current authentication status.

(self, session=None)

            return False

    def get_auth_status(self, session=None) -> dict:
        """Get current authentication status."""
        configured = self.is_configured()
        hw_fingerprint = self.get_hardware_fingerprint()
        hw_match = True

        if configured:
            try:
                with self._get_auth_conn() as conn:
                    cursor = conn.cursor()
                    cursor.execute("SELECT hardware_fingerprint, username FROM auth LIMIT 1")
                    row = cursor.fetchone()
                    if row:
                        hw_match = secrets.compare_digest(row['hardware_fingerprint'], hw_fingerprint)
            except Exception:
                hw_match = False

        authenticated = False
        if session and session.get('authenticated'):
            authenticated = True

        remaining_codes = 0
        if configured:
            try:
                with self._get_auth_conn() as conn:
                    cursor = conn.cursor()
                    cursor.execute("SELECT COUNT(*) FROM recovery_codes WHERE used = 0")
                    remaining_codes = cursor.fetchone()[0]
            except Exception:
                pass

        # First login: auth configured and encrypted DB exists (needs decryption)
        first_login = configured and os.path.exists(self.encrypted_db_path)

        return {
            'configured': configured,
            'authenticated': authenticated,
            'hw_match': hw_match,
            'recovery_codes_remaining': remaining_codes,
            'first_login': first_login,
            'db_ready': self._db_ready
        }

    # =========================================================================
    # PUBLIC API - SETUP