created module spp_encryption

Author: reichie020212

requirements.txt

@@ -4,9 +4,11 @@ bravado_core
 faker
 geojson
 jsonschema
+jwcrypto
 pyjwt>=2.4.0
 pyproj
 python-magic
+qrcode
 shapely
 simplejson
 swagger_spec_validator

spp_encryption/__init__.py

@@ -0,0 +1 @@
+from . import models

spp_encryption/__manifest__.py

@@ -0,0 +1,27 @@
+# Part of OpenSPP. See LICENSE file for full copyright and licensing details.
+
+
+{
+    "name": "SPP Encryption",
+    "category": "OpenSPP",
+    "version": "17.0.1.0.0",
+    "sequence": 1,
+    "author": "OpenSPP.org",
+    "website": "https://github.com/OpenSPP/openspp-modules",
+    "license": "LGPL-3",
+    "development_status": "Beta",
+    "maintainers": ["jeremi", "gonzalesedwin1123"],
+    "depends": [
+        "g2p_encryption",
+    ],
+    "external_dependencies": {"python": ["jwcrypto"]},
+    "data": [
+        "views/encryption_provider.xml",
+    ],
+    "assets": {},
+    "demo": [],
+    "images": [],
+    "application": False,
+    "installable": True,
+    "auto_install": False,
+}

spp_encryption/models/__init__.py

@@ -0,0 +1 @@
+from . import encryption_provider

spp_encryption/models/encryption_provider.py

@@ -0,0 +1,85 @@
+import json
+import uuid
+
+from jwcrypto import jwe, jwk, jwt
+from jwcrypto.common import json_decode, json_encode
+from jwcrypto.jws import InvalidJWSSignature
+
+from odoo import fields, models
+
+
+class JWCryptoEncryptionProvider(models.Model):
+    _inherit = "g2p.encryption.provider"
+
+    type = fields.Selection(selection_add=[("jwcrypto", "JWCrypto")])
+
+    jwcrypto_key = fields.Char(help="JWK key in JSON format for encryption, decryption, signing, and verification")
+
+    def _get_jwk_key(self):
+        self.ensure_one()
+        if not self.jwcrypto_key:
+            raise ValueError("JWCrypto key is not set.")
+        return jwk.JWK.from_json(self.jwcrypto_key)
+
+    def encrypt_data_jwcrypto(self, data: bytes, **kwargs) -> bytes:
+        self.ensure_one()
+        key = self._get_jwk_key()
+        enc = jwe.JWE(data, json_encode({"alg": "RSA-OAEP", "enc": "A256GCM"}))
+        enc.add_recipient(key)
+        return enc.serialize(compact=True).encode("utf-8")
+
+    def decrypt_data_jwcrypto(self, data: bytes, **kwargs) -> bytes:
+        self.ensure_one()
+        key = self._get_jwk_key()
+        enc = jwe.JWE()
+        enc.deserialize(data.decode("utf-8"), key=key)
+        return enc.payload
+
+    def jwt_sign_jwcrypto(self, data, **kwargs) -> str:
+        self.ensure_one()
+        key = self._get_jwk_key()
+        token = jwt.JWT(header={"alg": "RS256"}, claims=data)
+        token.make_signed_token(key)
+        return token.serialize()
+
+    def jwt_verify_jwcrypto(self, token: str, **kwargs):
+        self.ensure_one()
+        key = self._get_jwk_key()
+        try:
+            received_jwt = jwt.JWT(key=key, jwt=token)
+            verified = True
+        except InvalidJWSSignature:
+            received_jwt = None
+            verified = False
+        return verified, received_jwt
+
+    def get_jwks_jwcrypto(self, **kwargs):
+        self.ensure_one()
+        key = self._get_jwk_key()
+        public_key = key.export_public()
+        jwks = {"keys": [json_decode(public_key)]}
+        return jwks
+
+    def generate_and_store_jwcrypto_key(self, key_type="RSA", size=2048):
+        """
+        Generates a new JWK (JSON Web Key) for the current record and stores it in the `jwcrypto_key` field.
+        :param key_type: The type of key to generate, e.g., 'RSA'.
+        :param size: The size of the key (applies to RSA keys).
+        :return: None
+        """
+        if key_type != "RSA":
+            raise ValueError("Unsupported key type. Currently, only 'RSA' is supported.")
+
+        key = jwk.JWK.generate(kty=key_type, size=size)
+
+        kid = str(uuid.uuid4())
+
+        key_export = key.export()
+
+        export_data = json.loads(key_export)
+        export_data["kid"] = kid
+
+        key_export = json.dumps(export_data)
+
+        # Assuming this method is called on a specific record, not on the model class itself
+        self.jwcrypto_key = key_export

spp_encryption/pyproject.toml

@@ -0,0 +1,3 @@
+[build-system]
+requires = ["whool"]
+build-backend = "whool.buildapi"

spp_encryption/views/encryption_provider.xml

@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<odoo>
+    <record id="view_encryption_provider_form" model="ir.ui.view">
+        <field name="name">view_encryption_provider_form</field>
+        <field name="model">g2p.encryption.provider</field>
+        <field name="inherit_id" ref="g2p_encryption.view_encryption_provider_form" />
+        <field name="arch" type="xml">
+            <xpath expr="//group[@name='Base']" position="after">
+                <field name="jwcrypto_key" invisible="1" />
+                <button
+                    name="generate_and_store_jwcrypto_key"
+                    string="Create Jwcrypto Key"
+                    type="object"
+                    class="oe_highlight btn-primary"
+                    invisible="jwcrypto_key"
+                />
+                <button
+                    name="generate_and_store_jwcrypto_key"
+                    string="Update Jwcrypto Key"
+                    type="object"
+                    class="oe_highlight btn-primary"
+                    invisible="not jwcrypto_key"
+                />
+            </xpath>
+        </field>
+    </record>
+</odoo>