Function prepare_security_config

core/security.py:38–60

(config: dict[str, Any])

def prepare_security_config(config: dict[str, Any]) -> SecurityConfigResult:
    next_config = copy.deepcopy(config)
    result = SecurityConfigResult(config=next_config)

    admin_token = str(next_config.get("admin_token") or "")
    if not admin_token:
        result.setup_required = True
    elif verify_password(LEGACY_DEFAULT_ADMIN_TOKEN, admin_token):
        next_config["admin_token"] = ""
        result.setup_required = True
        result.changed = True
    elif not is_password_hashed(admin_token):
        next_config["admin_token"] = hash_password(admin_token)
        result.password_hashed = True
        result.changed = True

    jwt_secret = next_config.get("jwt_secret")
    if not is_valid_jwt_secret(jwt_secret):
        next_config["jwt_secret"] = generate_jwt_secret()
        result.jwt_secret_rotated = True
        result.changed = True

    return result