Skip to content

fix(backend): require encryption master key#190

Open
huazhuang80-star wants to merge 1 commit into
ChainForgee:mainfrom
huazhuang80-star:backend-require-encryption-master-key-89
Open

fix(backend): require encryption master key#190
huazhuang80-star wants to merge 1 commit into
ChainForgee:mainfrom
huazhuang80-star:backend-require-encryption-master-key-89

Conversation

@huazhuang80-star

Copy link
Copy Markdown

Closes #89.

Summary

  • remove the hardcoded insecure fallback encryption key
  • fail fast when ENCRYPTION_MASTER_KEY is missing
  • add regression coverage for the missing-key startup path

Testing

  • app/backend/node_modules/.bin/jest.CMD src/common/encryption/encryption.service.spec.ts --runInBand

Note: the first pnpm invocation installed dependencies but exited before running tests because dependency build-script approval is required in this environment. The direct Jest command above passed after dependencies were available.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[CRITICAL] Remove hardcoded encryption fallback key from EncryptionService

1 participant