从1password到自建密码管理器:2password

class ModernPasswordManager(QMainWindow):
    def __init__(self):
        super().__init__()
        # 数据库配置建议从环境变量或配置文件读取
        self.db_config = {
            'host': os.getenv('DB_HOST', '127.0.0.1'),
            'port': int(os.getenv('DB_PORT', 3306)),
            'user': os.getenv('DB_USER', 'root'),
            'password': os.getenv('DB_PASS', ''),
            'database': '2password',
            'charset': 'utf8mb4'
        }
    
    def get_connection(self):
        return pymysql.connect(**self.db_config)

def add_password(self, account, password, website, notes, mfa_secret):
    conn = self.get_connection()
    cursor = conn.cursor()
    try:
        # 插入密码记录
        sql = """INSERT INTO passwords 
                 (account, password, website, notes, mfa_secret, created_at, modified_at) 
                 VALUES (%s, %s, %s, %s, %s, NOW(), NOW())"""
        cursor.execute(sql, (account, password, website, notes, mfa_secret))
        password_id = cursor.lastrowid
        
        # 记录历史
        history_sql = """INSERT INTO history 
                        (password_id, operation, new_value, created_at) 
                        VALUES (%s, %s, %s, NOW())"""
        cursor.execute(history_sql, (password_id, 'add', json.dumps({
            'account': account, 'password': password, 'website': website,
            'notes': notes, 'mfa_secret': mfa_secret
        })))
        
        conn.commit()
        self.load_data()
        return True
    except Exception as e:
        conn.rollback()
        print(f"添加失败: {e}")
        return False
    finally:
        cursor.close()
        conn.close()

def save_edit_password(self):
    """编辑保存 - 同时记录旧值到历史表"""
    account = self.account_input.text().strip()
    password = self.password_input.text().strip()
    website = self.website_input.text().strip()
    notes = self.notes_input.text().strip()
    mfa_secret = self.mfa_input.text().strip()

    if not password:
        QMessageBox.warning(self, "提示", "密码不能为空")
        return

    current_row = self.password_list.currentRow()
    old_data = self.passwords[current_row]  # 获取修改前的完整数据
    pwd_id = old_data['id']
    now = datetime.now().strftime("%Y-%m-%d %H:%M:%S")

    try:
        conn = self.get_connection()
        cursor = conn.cursor()

        # Step 1: 更新密码记录
        cursor.execute("""
            UPDATE passwords
            SET account=%s, password=%s, website=%s, notes=%s,
                mfa_secret=%s, modified_at=%s
            WHERE id=%s
        """, (account, password, website, notes,
              mfa_secret or old_data.get('mfa_secret', ''), now, pwd_id))

        # Step 2: 将旧值写入历史表(不可删除,永久保留)
        cursor.execute("""
            INSERT INTO history
            (id, password_id, action, account, website, timestamp,
             old_password, old_account, old_website, old_notes, old_mfa_secret)
            VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)
        """, (f"hist_{datetime.now().strftime('%Y%m%d%H%M%S')}",
              pwd_id, "修改", account, website, now,
              old_data['password'], old_data['account'],
              old_data['website'], old_data['notes'],
              old_data.get('mfa_secret', '')))

        conn.commit()  # 两条SQL在同一事务中提交
        cursor.close()
        conn.close()

        # Step 3: 刷新UI
        self.refresh_password_list()
        self.refresh_history_list()
        self.clear_inputs()
        QMessageBox.information(self, "成功", "密码修改成功")
    except Exception as e:
        QMessageBox.critical(self, "错误", f"修改失败: {str(e)}")

import pyotp

def generate_mfa_code(secret):
    """生成6位TOTP验证码"""
    totp = pyotp.TOTP(secret)
    return totp.now()

def verify_mfa_code(secret, code):
    """验证MFA验证码"""
    totp = pyotp.TOTP(secret)
    return totp.verify(code)

import csv
import pymysql

def import_from_csv(csv_file, default_password="123"):
    conn = pymysql.connect(host='127.0.0.1', port=3306, 
                           user='root', password=os.getenv('DB_PASS', ''), 
                           database='2password')
    cursor = conn.cursor()
    
    with open(csv_file, 'r', encoding='utf-8') as f:
        reader = csv.DictReader(f)
        for row in reader:
            # 字段映射: 标题→备注, 用户名→账号
            sql = """INSERT INTO passwords 
                     (account, password, website, notes, mfa_secret, created_at, modified_at) 
                     VALUES (%s, %s, %s, %s, %s, NOW(), NOW())"""
            cursor.execute(sql, (
                row.get('用户名', ''),
                default_password,  # 默认密码
                row.get('URL', ''),
                row.get('备注', ''),  # 标题作为备注
                row.get('mfa', '')
            ))
    
    conn.commit()
    cursor.close()
    conn.close()

# 安装依赖
pip install pyinstaller pymysql pyotp qrcode

# 打包成macOS应用
pyinstaller --name=2password --windowed password_manager.py

# 创建DMG
create-dmg --volname "2password" --window-pos 200 --window-size 600 --icon-size 100 \
    --window-center --app-drop-link 600 --icon "2password.app" 200 \
    "2password.dmg"

2password/
├── src/
│   ├── password_manager.py  # 主程序
│   ├── init_db.py           # 数据库初始化
│   └── init_db.sql          # 表结构
└── dist/
    ├── 2password.app/       # macOS应用
    └── 2password.dmg        # 安装包

# 最基本的密码加密示例
from cryptography.fernet import Fernet
import base64, hashlib

def derive_key(master_password: str) -> bytes:
    """从主密码派生加密密钥"""
    # 使用PBKDF2派生密钥(实际应用中应加salt)
    key = hashlib.pbkdf2_hmac('sha256', master_password.encode(), b'salt', 100000)
    return base64.urlsafe_b64encode(key)

def encrypt_password(plain_text: str, master_password: str) -> str:
    """加密密码"""
    key = derive_key(master_password)
    f = Fernet(key)
    return f.encrypt(plain_text.encode()).decode()

def decrypt_password(encrypted_text: str, master_password: str) -> str:
    """解密密码"""
    key = derive_key(master_password)
    f = Fernet(key)
    return f.decrypt(encrypted_text.encode()).decode()