SEC-02: Implement credential rotation security improvements - Add JWT secret rotation to rotate-secret command - Generate 64-character HS512-compatible secrets - Automatic .env backup with timestamp - Atomic file updates via temp+rename pattern - Add health verification for rotated credentials - Route rotate-secret, rotate-secrets, vault commands in CLI - Add verification attempts for database and JWT endpoints Security improvements: - JWT_SECRET now rotatable (previously impossible) - Automatic rollback via backup files - Health checks catch configuration errors - Clear warnings about token invalidation Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| webinar_api | ||
| conversations.rs | ||
| mod.rs | ||
| mod_trimmed.rs | ||
| recording.rs | ||
| service.rs | ||
| ui.rs | ||
| webinar.rs | ||
| webinar_types.rs | ||
| whiteboard.rs | ||
| whiteboard_export.rs | ||