extrawest / extrawest_ocpi

Python implementation of Open Charge Point Interface (OCPI) protocol based on fastapi.

Extrawest OCPI

---

Python implementation of Open Charge Point Interface (OCPI) protocol based on fastapi.

Supported OCPI versions: 2.2.1, 2.1.1

OCPI Documentation: 2.2.1, 2.1.1

---

Requirements

---

Python >= 3.10

Installation

---

  pip install extrawest-ocpi

Documentation, installation and quickstart instructions are HERE

Roadmap

---

• Issues fixing

Related

---

The project was created through inspiration and adaptation of this project PY_OCPI.

License

---

This project is licensed under the terms of the MIT license.

extrawest_ocpi's Issues

Hard coded timestamp

extrawest_ocpi/py_ocpi/core/schemas.py

Line 18 in 50b2a07

timestamp: DateTime = str(datetime.now(timezone.utc)) # type: ignore

Due to this hardcoded value, the timestamps always correspondes to the time the app started.

Instead, fix the last line as follows:

from datetime import datetime, timezone
from typing import List, Union

from pydantic import BaseModel, Field

from py_ocpi.core.data_types import String, DateTime, URL
from py_ocpi.core.enums import ModuleID


class OCPIResponse(BaseModel):
    """
    https://github.com/ocpi/ocpi/blob/2.2.1/transport_and_format.asciidoc#117-response-format
    """

    data: Union[list, dict]
    status_code: int
    status_message: String(255)  # type: ignore
    timestamp: DateTime = Field(default_factory=lambda: datetime.now(tz=timezone.utc).isoformat())

[Vulnerability] FastAPI 0.101.1 possibility to fix?

OSV Report

Scanned /workspace/app/requirements.txt file as a requirements.txt and found 19 packages
+-------------------------------------+------+-----------+---------+---------+----------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE | VERSION | SOURCE               |
+-------------------------------------+------+-----------+---------+---------+----------------------+
| https://osv.dev/GHSA-2jv5-9r88-3w3p | 7.5  | PyPI      | fastapi | 0.101.1 | app/requirements.txt |
| https://osv.dev/PYSEC-2024-38       |      |           |         |         |                      |
+-------------------------------------+------+-----------+---------+---------+----------------------+

Safety Report

+==============================================================================+
 VULNERABILITIES FOUND
+==============================================================================+

-> Vulnerability found in fastapi version 0.101.1
   Vulnerability ID: 64930
   Affected spec: <0.109.1
   ADVISORY: FastAPI 0.109.1 addresses a critical security issue by
   upgrading its dependency python-multipart to version >=0.0.7. The upgrade...
   PVE-2024-64930
   For more information, please visit
   https://data.safetycli.com/v/64930/f17

 Scan was completed. 1 vulnerability was found. 

+==============================================================================+

To inform and ask for possibility to fix vulnerabilities?