Centralize hashing

packages/sshecret-admin/src/sshecret_admin/auth/authentication.py

@@ -93,3 +93,9 @@ def decode_token(settings: AdminServerSettings, token: str) -> TokenData | None:
     except jwt.InvalidTokenError as e:
         LOG.debug("Could not decode token: %s", e, exc_info=True)
         return None
+
+def hash_password(password: str) -> str:
+    """Hash password."""
+    salt = bcrypt.gensalt()
+    hashed_password = bcrypt.hashpw(password.encode(), salt)
+    return hashed_password.decode()

packages/sshecret-admin/src/sshecret_admin/auth/models.py

@@ -46,10 +46,6 @@ class PasswordDB(SQLModel, table=True):
     )
 
 
-def init_db(engine: sa.Engine) -> None:
-    """Create database."""
-    SQLModel.metadata.create_all(engine)
-
 
 class TokenData(SQLModel):
     """Token data."""
@@ -69,3 +65,6 @@ class LoginError(SQLModel):
     title: str
     message: str
 
+def init_db(engine: sa.Engine) -> None:
+    """Create database."""
+    SQLModel.metadata.create_all(engine)