backend/security.py

"""Security and governance stubs: audit logging, token auth, and encryption placeholders."""
import time
import hashlib
from typing import Dict, Any


class AuditLog:
    def __init__(self):
        self.entries = []

    def record(self, user: str, action: str, detail: Dict[str, Any] = None):
        self.entries.append({"ts": time.time(), "user": user, "action": action, "detail": detail or {}})


class TokenAuth:
    def __init__(self, secret: str = "demo-secret"):
        self.secret = secret

    def generate(self, user: str) -> str:
        token = hashlib.sha256((user + self.secret).encode()).hexdigest()
        return token

    def verify(self, token: str) -> bool:
        # naive verification for demo
        return isinstance(token, str) and len(token) == 64


def encrypt_data(data: bytes) -> bytes:
    # placeholder: identity function
    return data

def decrypt_data(data: bytes) -> bytes:
    return data