adding encryption to session id and email

authlib.py

@@ -1,5 +1,6 @@
 
-import hashlib, time
+import hashlib, time, json
+from cryptography.fernet import Fernet
 from connect import connection, engine, metadata
 import sqlalchemy as db
 
@@ -9,6 +10,15 @@ def hash_pass(password):
 class Auth:
     def __init__(self, session, expire=0):
         self.session = session
+        self.id = None
+        self.email = None
+        self.fernet = Fernet(b'3UH3USxvBcFITpnVa2gvTUIMO5jbc8jqU_Q1O6SNBLs=')
+
+        if session.get("id"):
+            value = json.loads(self.fernet.decrypt(session["id"]))
+            self.id = value["id"]
+            self.email = value["email"]
+        # Remember to always change
         self.expire=expire
 
     def checkAuth(self):
@@ -21,8 +31,11 @@ class Auth:
 
     def setAuth(self, id, email):
         self.session["gallitosccom"] = True
-        self.session["id"] = id
-        self.session["email"] = email
+        self.id = id
+        self.email = email
+        # self.session["id"] = id
+        # self.session["email"] = email
+        self.session["id"] = self.fernet(json.dumps({"id": id, "email": email}))
         if self.expire:
             self.session["tiempo"] = time.time()
 
@@ -30,7 +43,7 @@ class Auth:
         if self.session.get("gallitosccom"):
             self.session.pop("gallitosccom", None)
             self.session.pop("id", None)
-            self.session.pop("email", None)
+            # self.session.pop("email", None)
 
     def do_login(self, username, password):
         password = hash_pass(password)
@@ -62,7 +75,7 @@ class Auth:
         usuarios = db.Table('usuarios', metadata, autoload=True, autoload_with=engine)
         role = db.Table(table, metadata, autoload=True, autoload_with=engine)
         query = db.select([usuarios, role])
-        query = query.select_from(usuarios.join(role, usuarios.columns.id == role.columns.user_id)).where(role.columns.user_id == self.session["id"])
+        query = query.select_from(usuarios.join(role, usuarios.columns.id == role.columns.user_id)).where(role.columns.user_id == self.id)
         result = connection.execute(query).fetchone()
 
         if result:

registro-run.py

@@ -6,8 +6,7 @@ from authlib import *
 
 app = Flask(__name__)
 
-secret = os.open("secret","r").read()
-print(secret)
+secret = open("secret","r").read()
 
 @app.route('/', methods=['GET', 'POST'])
 def index():