76124590f0
fix(secrets-ui): admin role must be canonical 'Administrator' (case-sensitive) — 0.1.1
...
Reference-consumer (HistorianGateway) caught that SecretsAuthorization.AdminRole was
'administrator' (lowercase) while the family canonical role is CanonicalRole.Administrator.
ASP.NET role claims compare case-sensitively (Ordinal), so a real admin got 403 on the
secrets UI. Now nameof(CanonicalRole.Administrator).
2026-07-16 04:11:20 -04:00
2c64683303
docs(secrets): package README + embed in nupkgs
2026-07-16 04:00:32 -04:00
e20812cbae
chore(secrets): wire cache invalidation on rotate/delete, drop dead RevealEnabled, remove scaffold leftovers
2026-07-15 17:39:55 -04:00
294f53b49a
fix(secrets-ui): preserve metadata on rotate + audit unexpected mutation/reveal failures
2026-07-15 17:31:34 -04:00
0ab276dac0
feat(secrets-cli): set/get/list/rm/rotate commands
2026-07-15 17:26:14 -04:00
21556cc1a7
feat(secrets-ui): add/rotate/delete modal + audited gated reveal
2026-07-15 17:20:01 -04:00
d7f8ca455b
feat(secrets-ui): RCL + authz policies + metadata-only secrets list
2026-07-15 17:10:40 -04:00
7f1db1b214
feat(secrets): SecretsOptions + AddZbSecrets DI + migration hosted service
2026-07-15 17:05:30 -04:00
8c4175d8ce
fix(secrets): audit decryption failures in resolver (fail-loud, no plaintext)
2026-07-15 17:01:10 -04:00
0bb553212a
feat(secrets): ${secret:} config expander (fail-closed)
2026-07-15 16:58:34 -04:00
79ebd14baa
feat(secrets): default resolver with TTL cache + audit (never logs plaintext)
2026-07-15 16:55:24 -04:00
10455ec53b
feat(secrets): sqlite secret store (overwrite-in-place, tombstone, manifest, LWW)
2026-07-15 16:50:59 -04:00
e99a8731e9
feat(secrets): sqlite connection factory + schema v1 + migrator
2026-07-15 16:46:15 -04:00
1c13b4af99
feat(secrets): pluggable master-key providers (env/file/dpapi) + factory
2026-07-15 16:43:10 -04:00
01911508b9
fix(secrets): harden SecretName (reject rooted paths, fail-fast on default) + keep SecretDecryptionException sealed
2026-07-15 16:37:21 -04:00
b784c7117f
feat(secrets): AES-256-GCM envelope cipher with AAD binding
2026-07-15 16:34:46 -04:00
16b32257f5
feat(secrets): abstractions seam interfaces
2026-07-15 16:30:19 -04:00
d78b533045
feat(secrets): abstractions value types, enums, exceptions
2026-07-15 16:28:11 -04:00
824facab39
feat(secrets): scaffold ZB.MOM.WW.Secrets solution + 4 projects
2026-07-15 16:24:38 -04:00
Joseph Doherty