04/22 user dashboard view, no credentials popup automatically

config.py

@@ -42,12 +42,18 @@ APP_TITLE   = "Website Checker"
 APP_VERSION = "1.0.0"
 
 
+# Sensitive fields that are DPAPI-encrypted in config.ini
+_DB_SENSITIVE = {"user", "password"}
+
+
 def load_config() -> dict:
     """
     Load DB settings from config.ini.
     Returns a dict with keys: host, port, database, user, password.
+    Sensitive fields (user, password) are decrypted transparently via DPAPI.
     Returns empty dict if the file does not exist or is incomplete.
     """
+    from utils.config_crypto import decrypt_value
     cfg = _cp.ConfigParser()
     if not _os.path.exists(CONFIG_FILE):
         return {}
@@ -55,28 +61,77 @@ def load_config() -> dict:
     if "database" not in cfg:
         return {}
     section = cfg["database"]
-    return {
-        "host":     section.get("host",     ""),
-        "port":     section.getint("port",  3306),
-        "database": section.get("database", ""),
-        "user":     section.get("user",     ""),
-        "password": section.get("password", ""),
-    }
+    try:
+        return {
+            "host":     section.get("host",     ""),
+            "port":     section.getint("port",  3306),
+            "database": section.get("database", ""),
+            "user":     decrypt_value(section.get("user",     "")),
+            "password": decrypt_value(section.get("password", "")),
+        }
+    except RuntimeError as exc:
+        logger.error(f"Failed to decrypt DB credentials: {exc}")
+        raise
 
 
 def save_config(host: str, port: int, database: str, user: str, password: str):
-    """Persist DB connection settings to config.ini."""
+    """Persist DB connection settings to config.ini (sensitive fields DPAPI-encrypted)."""
+    from utils.config_crypto import encrypt_value
+    # Preserve any existing non-database sections (email, crypto, groq)
     cfg = _cp.ConfigParser()
+    if _os.path.exists(CONFIG_FILE):
+        cfg.read(CONFIG_FILE, encoding="utf-8")
     cfg["database"] = {
         "host":     host,
         "port":     str(port),
         "database": database,
-        "user":     user,
-        "password": password,
+        "user":     encrypt_value(user),
+        "password": encrypt_value(password),
     }
     with open(CONFIG_FILE, "w", encoding="utf-8") as fh:
         cfg.write(fh)
-    logger.info(f"Configuration saved to {CONFIG_FILE}.")
+    logger.info(f"Configuration saved to {CONFIG_FILE} (credentials encrypted).")
+
+
+def migrate_plaintext_config():
+    """
+    One-time migration: if config.ini contains plain-text DB credentials
+    (no 'dpapi:' prefix) encrypt them in-place using Windows DPAPI.
+    Safe to call on every startup — is a no-op when already encrypted.
+    """
+    from utils.config_crypto import encrypt_value, is_encrypted
+    if not _os.path.exists(CONFIG_FILE):
+        return
+    cfg = _cp.ConfigParser()
+    cfg.read(CONFIG_FILE, encoding="utf-8")
+    changed = False
+
+    # DB section
+    for key in ("user", "password"):
+        if cfg.has_option("database", key):
+            raw = cfg.get("database", key)
+            if raw and not is_encrypted(raw):
+                cfg.set("database", key, encrypt_value(raw))
+                changed = True
+
+    # Email section
+    if cfg.has_option("email", "smtp_password"):
+        raw = cfg.get("email", "smtp_password")
+        if raw and not is_encrypted(raw):
+            cfg.set("email", "smtp_password", encrypt_value(raw))
+            changed = True
+
+    # Groq section
+    if cfg.has_option("groq", "api_key"):
+        raw = cfg.get("groq", "api_key")
+        if raw and not is_encrypted(raw):
+            cfg.set("groq", "api_key", encrypt_value(raw))
+            changed = True
+
+    if changed:
+        with open(CONFIG_FILE, "w", encoding="utf-8") as fh:
+            cfg.write(fh)
+        logger.info("config.ini: plain-text credentials encrypted with Windows DPAPI.")
 
 
 def config_exists() -> bool: