-
Notifications
You must be signed in to change notification settings - Fork 16
/
rpcauth.py
64 lines (50 loc) · 1.82 KB
/
rpcauth.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
#!/usr/bin/env python3
# Copyright (c) 2015-2021 The Bitcoin Core developers
# Distributed under the MIT software license, see the accompanying
# file COPYING or http://www.opensource.org/licenses/mit-license.php.
import hmac
import json
from argparse import ArgumentParser
from getpass import getpass
from secrets import token_hex, token_urlsafe
def generate_salt(size):
"""Create size byte hex salt"""
return token_hex(size)
def generate_password():
"""Create 32 byte b64 password"""
return token_urlsafe(32)
def password_to_hmac(salt, password):
m = hmac.new(salt.encode("utf-8"), password.encode("utf-8"), "SHA256")
return m.hexdigest()
def main():
parser = ArgumentParser(description="Create login credentials for a JSON-RPC user")
parser.add_argument("username", help="the username for authentication")
parser.add_argument(
"password",
help='leave empty to generate a random password or specify "-" to prompt for password',
nargs="?",
)
parser.add_argument(
"-j", "--json", help="output to json instead of plain-text", action="store_true"
)
args = parser.parse_args()
if not args.password:
args.password = generate_password()
elif args.password == "-":
args.password = getpass()
# Create 16 byte hex salt
salt = generate_salt(16)
password_hmac = password_to_hmac(salt, args.password)
if args.json:
odict = {
"username": args.username,
"password": args.password,
"rpcauth": f"{args.username}:{salt}${password_hmac}",
}
print(json.dumps(odict))
else:
print("String to be appended to bitcoin.conf:")
print(f"rpcauth={args.username}:{salt}${password_hmac}")
print(f"Your password:\n{args.password}")
if __name__ == "__main__":
main()