settings.py

from django.conf import settings

# Our different endpoints like /key and /nonce will be below this slug
DREIATTEST_BASE_URL = getattr(settings, "DREIATTEST_BASE_URL", "dreiattest/")

# Header containing the DeviceSession uid
DREIATTEST_UID_HEADER = getattr(
    settings, "DREIATTEST_UID_HEADER", "HTTP_DREIATTEST_UID"
)

# Header containing the assertion
DREIATTEST_ASSERTION_HEADER = getattr(
    settings, "DREIATTEST_ASSERTION_HEADER", "HTTP_DREIATTEST_SIGNATURE"
)

# Header containing the list of comma separated headers that are included in the assertion
DREIATTEST_USER_HEADERS_HEADER = getattr(
    settings, "DREIATTEST_USER_HEADERS_HEADER", "HTTP_DREIATTEST_USER_HEADERS"
)

# Header containing the server nonce that was used inside the attestation
DREIATTEST_NONCE_HEADER = getattr(
    settings, "DREIATTEST_NONCE_HEADER", "HTTP_DREIATTEST_NONCE"
)

# Header containing the shared secret to bypass the verification process. Helpful for debugging
DREIATTEST_BYPASS_HEADER = getattr(
    settings, "DREIATTEST_BYPASS_HEADER", "HTTP_DREIATTEST_SHARED_SECRET"
)

# Header containing the app identifier (bundle id on iOS, package id on Android). Used for selecting the appropriate
# verification configuration.
DREIATTEST_APPID_HEADER = getattr(
    settings, "DREIATTEST_APPID_HEADER", "HTTP_DREIATTEST_APP_IDENTIFIER"
)

# Header containing the apple app id
_dreiattest_apple_app_id_deprecated = getattr(settings, "DREIATTEST_APPLE_APPID", None)

# Header containing the apple app ids
DREIATTEST_APPLE_APPIDS = getattr(
    settings, "DREIATTEST_APPLE_APPIDS", [_dreiattest_apple_app_id_deprecated] or []
)

# Header containing the google apk name
__DREIATTEST_GOOGLE_APK_NAME = getattr(settings, "DREIATTEST_GOOGLE_APK_NAME", None)

# Indicating if we're in a production environment or not. Some extra verifications are made if this is true.
DREIATTEST_PRODUCTION = getattr(settings, "DREIATTEST_PRODUCTION", True)

# SHA256 hex of the Google APK Certificate
__DREIATTEST_GOOGLE_APK_CERTIFICATE_DIGEST = getattr(
    settings, "DREIATTEST_GOOGLE_APK_CERTIFICATE_DIGEST", None
)

# The decryption key of the play integrity api
# see: https://developer.android.com/google/play/integrity/setup#switching-api-key-management
__DREIATTEST_GOOGLE_DECRYPTION_KEY = getattr(
    settings, "DREIATTEST_GOOGLE_DECRYPTION_KEY", None
)

# The verification key of the play integrity api
# see: https://developer.android.com/google/play/integrity/setup#switching-api-key-management
__DREIATTEST_GOOGLE_VERIFICATION_KEY = getattr(
    settings, "DREIATTEST_GOOGLE_VERIFICATION_KEY", None
)

# Allow apps that were not installed via the Play Store to connect to your server. These will be verified via the
# signing certificate instead. (DREIATTEST_GOOGLE_APK_CERTIFICATE_DIGEST must be set)
__DREIATTEST_GOOGLE_ALLOW_NON_PLAY_INSTALLS = getattr(
    settings, "DREIATTEST_GOOGLE_ALLOW_NON_PLAY_INSTALLS", False
)

# The minimum device integrty verdict that must be present.
# (see https://developer.android.com/google/play/integrity/setup#optional_device_information)
__DREIATTEST_GOOGLE_REQUIRED_DEVICE_VERDICT = getattr(
    settings, "DREIATTEST_GOOGLE_REQUIRED_DEVICE_VERDICT", "MEETS_DEVICE_INTEGRITY"
)

# Configuration dicts for the play integrity api (see README for more info).
DREIATTEST_PLAY_INTEGRITY_CONFIGS: list[dict[str, any]] = getattr(
    settings, "DREIATTEST_PLAY_INTEGRITY_CONFIGS", []
)
if len(DREIATTEST_PLAY_INTEGRITY_CONFIGS) == 0:
    DREIATTEST_PLAY_INTEGRITY_CONFIGS = [
        {
            "apk_name": __DREIATTEST_GOOGLE_APK_NAME,
            "decryption_key": __DREIATTEST_GOOGLE_DECRYPTION_KEY,
            "verification_key": __DREIATTEST_GOOGLE_VERIFICATION_KEY,
            "allow_non_play_installs": __DREIATTEST_GOOGLE_ALLOW_NON_PLAY_INSTALLS,
            "certificate_digest": __DREIATTEST_GOOGLE_APK_CERTIFICATE_DIGEST,
            "required_device_verdict": __DREIATTEST_GOOGLE_REQUIRED_DEVICE_VERDICT,
        }
    ]

# If this is set and DREIATTEST_BYPASS_HEADER is sent by the client, the veirification is skipped.
DREIATTEST_BYPASS_SECRET = getattr(settings, "DREIATTEST_BYPASS_SECRET", None)

# Give the user a chance to hook into the key registration process
DREIATTEST_PLUGINS = getattr(settings, "DREIATTEST_PLUGINS", [])