Update helper/subscriptions.py

helper/subscriptions.py

@@ -4,7 +4,7 @@ import json
 import os
 from datetime import datetime, timezone
 from pathlib import Path
-
+import base64
 import psycopg
 from psycopg.rows import dict_row
 from supabase import Client, create_client
@@ -302,12 +302,25 @@ def resolve_jwt_identity(token: str):
         "signed_up": created_at.isoformat() if hasattr(created_at, "isoformat") else None,
     }
 
+def hash_lightning_api_key(secret: str) -> str:
+        salt = os.urandom(16)
+        derived_key = hashlib.scrypt(
+            secret.encode("utf-8"),
+            salt=salt,
+            n=16384, r=8, p=1,
+            dklen=32
+        )
+    
+        salt_b64 = base64.urlsafe_b64encode(salt).rstrip(b"=").decode()
+        key_b64 = base64.urlsafe_b64encode(derived_key).rstrip(b"=").decode()
+    
+        return f"scrypt${salt_b64}${key_b64}"
 
 async def resolve_api_key_identity(token: str | None):
     if token is None or token.strip() == "":
         return None
 
-    token_hash = hashlib.sha256(token.encode("utf-8")).hexdigest()
+    token_hash = hash_lightning_api_key(token)
 
     row = await execute_query(
         """