- fix github linting action

- added tox for local testing

- fix github linting action

Author: DelboyJay

.github/actions/lint/action.yml

@@ -0,0 +1,13 @@
+name: "Linting"
+runs:
+  using: "composite"
+  steps:
+  - uses: actions/[email protected]
+
+  - name: Set up Python 3.9
+    uses: actions/[email protected]
+    with:
+      python-version: "3.9"
+
+  - name: pre-commit
+    uses: pre-commit/[email protected]

.github/workflows/lint.yml

@@ -10,6 +10,14 @@ on:
       - master
 
 jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/[email protected]
+
+      - uses: ./.github/actions/lint
+
   tests:
     name: Python ${{ matrix.python-version }}
     runs-on: ubuntu-latest
@@ -24,9 +32,9 @@ jobs:
           - "3.13"
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v4.2.2
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v5.3.0
         with:
           python-version: ${{ matrix.python-version }}
 

.github/workflows/main.yml

@@ -20,7 +20,7 @@ def configure_salt(self, value: Any) -> bytes:
         return force_bytes(value)
 
     def configure(self) -> Dict[str, Any]:
-        digest = self.configured_data["DIGEST"]()
+        digest = self.configured_data["DIGEST"]
         salt = self.configured_data["SALT"]
         # Key Derivation Function
         kdf = pbkdf2.PBKDF2HMAC(

django_cryptography/conf.py

@@ -282,7 +282,6 @@ def signature(self, value: Union[bytes, str]) -> bytes:
         h = HMAC(
             force_bytes(self.key),
             self.hasher,
-            backend=settings.CRYPTOGRAPHY_BACKEND,  # type: ignore
         )
         h.update(force_bytes(value))
         return h.finalize()

django_cryptography/core/signing.py

@@ -75,15 +75,15 @@ def salted_hmac(
 
     # We need to generate a derived key from our base key.  We can do this by
     # passing the key_salt and our base key through a pseudo-random function.
-    digest = hashes.Hash(hasher, backend=settings.CRYPTOGRAPHY_BACKEND)
+    digest = hashes.Hash(hasher)
     digest.update(key_salt + secret)
     key = digest.finalize()
 
     # If len(key_salt + secret) > sha_constructor().block_size, the above
     # line is redundant and could be replaced by key = key_salt + secret, since
     # the hmac module does the same thing for keys longer than the block size.
     # However, we need to ensure that we *always* do this.
-    h = HMAC(key, hasher, backend=settings.CRYPTOGRAPHY_BACKEND)
+    h = HMAC(key, hasher)
     h.update(force_bytes(value))
     return h
 
@@ -113,7 +113,7 @@ def pbkdf2(
     password = force_bytes(password)
     salt = force_bytes(salt)
     kdf = PBKDF2HMAC(
-        digest, dklen, salt, iterations, backend=settings.CRYPTOGRAPHY_BACKEND
+        digest, dklen, salt, iterations
     )
     return kdf.derive(password)
 
@@ -150,7 +150,6 @@ def _encrypt_from_parts(self, data: bytes, current_time: int, iv: bytes) -> byte
         encryptor = Cipher(
             algorithms.AES(force_bytes(self.key)),
             modes.CBC(iv),
-            backend=settings.CRYPTOGRAPHY_BACKEND,
         ).encryptor()
         ciphertext = encryptor.update(padded_data) + encryptor.finalize()
 
@@ -164,7 +163,6 @@ def decrypt(self, data: bytes, ttl: Optional[int] = None) -> bytes:
         decryptor = Cipher(
             algorithms.AES(force_bytes(self.key)),
             modes.CBC(iv),
-            backend=settings.CRYPTOGRAPHY_BACKEND,
         ).decryptor()
         plaintext_padded = decryptor.update(ciphertext)
         try: