将客户端密钥正确存储在数据库中，以用于discourse openid-connect

from sqlalchemy import create_engine, Column, Integer, String
from sqlalchemy.ext.declarative import declarative_base
from sqlalchemy.orm import sessionmaker
from cryptography.fernet import Fernet

Base = declarative_base()

class ClientSecret(Base):
    __tablename__ = 'client_secrets'
    id = Column(Integer, primary_key=True)
    client_id = Column(String)
    encrypted_secret = Column(String)

engine = create_engine('sqlite:///client_secrets.db')
Base.metadata.create_all(engine)
Session = sessionmaker(bind=engine)
session = Session()

# 生成加密密钥
key = Fernet.generate_key()
fernet = Fernet(key)

# 加密客户端密钥
client_id = 'example_client_id'
client_secret = 'example_client_secret'
encrypted_secret = fernet.encrypt(client_secret.encode())

# 存储到数据库
new_secret = ClientSecret(client_id=client_id, encrypted_secret=encrypted_secret.decode())
session.add(new_secret)
session.commit()

# 从数据库中读取并解密客户端密钥
retrieved_secret = session.query(ClientSecret).filter_by(client_id=client_id).first()
decrypted_secret = fernet.decrypt(retrieved_secret.encrypted_secret.encode()).decode()
print(f'Decrypted Secret: {decrypted_secret}')