1
1
mirror of https://github.com/go-gitea/gitea synced 2025-01-13 03:04:27 +00:00
zeripath 544ef7d394
Encrypt migration credentials at rest (#15895) (#16187)
Backport #15895

Storing these credentials is a liability.

* Encrypt credentials with SECRET_KEY before persisting to task queue table (they need to be persisted due to the nature of the task queue)
  - security in depth: helps when attacker has access to DB only, but not app.ini
* Delete all credentials (even encrypted) from the task table, once the migration is done, for safety
  - security in depth: minimizes leaked data if attacker gains access to snapshot of both DB and app.ini
2021-06-17 22:59:28 +02:00
..
2020-06-15 16:46:01 -04:00
2020-04-05 07:20:50 +01:00
2019-12-15 16:57:34 -05:00
2020-04-05 07:20:50 +01:00
2020-04-05 07:20:50 +01:00
2020-08-16 23:07:38 -04:00
2020-03-02 00:05:44 +02:00
2020-04-05 07:20:50 +01:00
2019-06-12 15:41:28 -04:00
2021-04-09 12:39:40 +02:00