Rodrigo Rodriguez
e143968179
SEC-02: Implement credential rotation security improvements - Add JWT secret rotation to rotate-secret command - Generate 64-character HS512-compatible secrets - Automatic .env backup with timestamp - Atomic file updates via temp+rename pattern - Add health verification for rotated credentials - Route rotate-secret, rotate-secrets, vault commands in CLI - Add verification attempts for database and JWT endpoints Security improvements: - JWT_SECRET now rotatable (previously impossible) - Automatic rollback via backup files - Health checks catch configuration errors - Clear warnings about token invalidation Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| core.rs | ||
| core.rs.bad | ||
| core.rs.bad2 | ||
| core.rs.bak | ||
| core.rs.check | ||
| core.rs.fix | ||
| core.rs.head | ||
| core.rs.new | ||
| mod.rs | ||
| mod.rs.bak | ||
| mod.rs.final | ||
| rbac.rs | ||
| task_models.rs | ||
| workflow_models.rs | ||