make .secret files user-readable only

This commit is contained in:
Matt Behrens 2018-01-24 21:41:02 -05:00
parent 600a0b8e1f
commit 94db3a5b6f

View file

@ -1,3 +1,4 @@
from os import umask
from subprocess import run from subprocess import run
from threading import Thread, Lock from threading import Thread, Lock
@ -64,11 +65,15 @@ class StreamListener(mastodon.StreamListener):
self.queue.add(links[0]) self.queue.add(links[0])
def register(api_base_url): def register(api_base_url):
old_umask = umask(0o77)
Mastodon.create_app('fediplay', api_base_url=api_base_url, to_file='clientcred.secret') Mastodon.create_app('fediplay', api_base_url=api_base_url, to_file='clientcred.secret')
umask(old_umask)
def login(api_base_url, email, password): def login(api_base_url, email, password):
client = Mastodon(client_id='clientcred.secret', api_base_url=api_base_url) client = Mastodon(client_id='clientcred.secret', api_base_url=api_base_url)
old_umask = umask(0o77)
client.log_in(email, password, to_file='usercred.secret') client.log_in(email, password, to_file='usercred.secret')
umask(old_umask)
def stream(api_base_url): def stream(api_base_url):
client = Mastodon(client_id='clientcred.secret', access_token='usercred.secret', api_base_url=api_base_url) client = Mastodon(client_id='clientcred.secret', access_token='usercred.secret', api_base_url=api_base_url)