jubnl 1b28bd96d4 fix: encrypt SMTP password at rest using AES-256-GCM ...

The smtp_pass setting was stored as plaintext in app_settings, exposing
SMTP credentials to anyone with database read access. Apply the same
encrypt_api_key/decrypt_api_key pattern already used for OIDC client
secrets and API keys. A new migration transparently re-encrypts any
existing plaintext value on startup; decrypt_api_key handles legacy
plaintext gracefully so in-flight reads remain safe during upgrade.

2026-04-01 07:56:43 +02:00

..

database.ts

fix: route db helper functions through the null-safe proxy

2026-04-01 07:56:01 +02:00

migrations.ts

fix: encrypt SMTP password at rest using AES-256-GCM

2026-04-01 07:56:43 +02:00

schema.ts

feat: configurable trip reminders, admin full access, and enhanced audit logging

2026-03-31 22:23:38 +03:00

seeds.ts

feat: configurable trip reminders, admin full access, and enhanced audit logging

2026-03-31 22:23:38 +03:00