This repository has been archived on 2026-05-24. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Paperclip 1c7628459f fix(db): use random per-encryption salt in crypto.ts (GRO-453) ...

Generate a unique 16-byte random salt for each encryptSecret() call
and store it as a prefix in the ciphertext. Format changed from
  iv:ciphertext:authTag → salt:iv:ciphertext:authTag

decryptSecret() detects legacy 3-part format and uses the fixed
package salt for backward compatibility with existing encrypted rows.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-04 13:14:18 +00:00

..

api

fix(db): use random per-encryption salt in crypto.ts (GRO-453)

2026-04-04 13:14:18 +00:00

e2e

fix(e2e): resolve remaining 2 E2E test failures

2026-04-02 15:48:21 +00:00

groombook/overlays/uat

fix(GRO-451): re-seal UAT secrets with correct cluster certificate

2026-04-04 12:27:23 +00:00

web

Merge remote-tracking branch 'origin/main' into feat/gro-392-oobe-auth-provider-bootstrap

2026-04-03 07:51:46 +00:00