SEC-02: Implement credential rotation security improvements - Add JWT secret rotation to rotate-secret command - Generate 64-character HS512-compatible secrets - Automatic .env backup with timestamp - Atomic file updates via temp+rename pattern - Add health verification for rotated credentials - Route rotate-secret, rotate-secrets, vault commands in CLI - Add verification attempts for database and JWT endpoints Security improvements: - JWT_SECRET now rotatable (previously impossible) - Automatic rollback via backup files - Health checks catch configuration errors - Clear warnings about token invalidation Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| contacts_api | ||
| calendar_integration.rs | ||
| crm.rs | ||
| crm_ui.rs | ||
| external_sync.rs | ||
| external_sync.rs.bak | ||
| google_client.rs | ||
| microsoft_client.rs | ||
| mod.rs | ||
| sync_types.rs | ||
| tasks_integration.rs | ||