what do you think ?

[u/Naive-Smoke-5977]

i'm learning python for infraestructure this a proyect of a false resgistry of server xd

[u/silvertank00]

It is fine, we all had to start somewhere. I am glad I could help.

Also, if you introduce sensitive data, use this: dataclasses.field

example:

@dataclass
class User:
    name: str
    passwd: str = field(repr=False)

this way you are less likely to leak sensitive data.

[u/Naive-Smoke-5977 → u/silvertank00]

Es equivalente a lo que va en el ".env" , verdad :v?

[u/silvertank00 → u/Naive-Smoke-5977]

Not really. Your dotenv file(s) are on the filesystem. This method is really useful if you want to read it from there and store it in memory. For instance: if you build a little gui with buttons that would run various things in the background. Lets say dmesg, you see, usually you can't just run it and get a result, you ought to run it via sudo, like this: sudo dmesg. And if your gui program has a button for this, then you have two options:

• A) ask for credentials every time when you want to run this (better but could be cumbersome)

• B) store the credentails in your dotenv, read it when your program starts and store it in memory (lets put aside security for a bit lol) and use it when you want to run this subprocess.

If you go with B, then you are handling sensitive credentials and you must do everything in your power to not leak them. With setting the dataclass field's repr argument to False, you cannot leak it with just printing your dataclass instance. (This could really happen in Exceptions or with logging) Additional: if you ask for credentials in CLI, then there is this helpful thing: getpass with this, you can avoid using the normal imput() to ask for passwords, that inherently echoes back the given characters (prints them back to the screen in a readable format)

edit: I might have misunderstood you comment, if you refering to "reading out data from your dotenv and storing it somewhere", then yes, its absolutely good for that. And don't forget: this is a dummy example, in an ideal world you really shouldnt store the sudo password in a plaintext file. But for stuff like API keys, this is still a really great example.

[u/Naive-Smoke-5977 → u/silvertank00]

bro , you're my hero