9bd3c76d96
fix(secrets): ${secret:} expander skips comment keys (_-prefixed leaf) — 0.1.2
...
Live HistorianGateway boot caught that the expander scanned a '_secretsComment' appsettings
value documenting the ${secret:...} syntax, tried to resolve the literal example token, and
crashed boot. The family uses _*Comment keys pervasively, so skip any config key whose leaf
segment starts with '_' (the _comment convention). Functional keys never lead with '_'.
2026-07-16 04:16:25 -04:00
e20812cbae
chore(secrets): wire cache invalidation on rotate/delete, drop dead RevealEnabled, remove scaffold leftovers
2026-07-15 17:39:55 -04:00
0ab276dac0
feat(secrets-cli): set/get/list/rm/rotate commands
2026-07-15 17:26:14 -04:00
7f1db1b214
feat(secrets): SecretsOptions + AddZbSecrets DI + migration hosted service
2026-07-15 17:05:30 -04:00
8c4175d8ce
fix(secrets): audit decryption failures in resolver (fail-loud, no plaintext)
2026-07-15 17:01:10 -04:00
0bb553212a
feat(secrets): ${secret:} config expander (fail-closed)
2026-07-15 16:58:34 -04:00
79ebd14baa
feat(secrets): default resolver with TTL cache + audit (never logs plaintext)
2026-07-15 16:55:24 -04:00
10455ec53b
feat(secrets): sqlite secret store (overwrite-in-place, tombstone, manifest, LWW)
2026-07-15 16:50:59 -04:00
e99a8731e9
feat(secrets): sqlite connection factory + schema v1 + migrator
2026-07-15 16:46:15 -04:00
1c13b4af99
feat(secrets): pluggable master-key providers (env/file/dpapi) + factory
2026-07-15 16:43:10 -04:00
01911508b9
fix(secrets): harden SecretName (reject rooted paths, fail-fast on default) + keep SecretDecryptionException sealed
2026-07-15 16:37:21 -04:00
b784c7117f
feat(secrets): AES-256-GCM envelope cipher with AAD binding
2026-07-15 16:34:46 -04:00
d78b533045
feat(secrets): abstractions value types, enums, exceptions
2026-07-15 16:28:11 -04:00
824facab39
feat(secrets): scaffold ZB.MOM.WW.Secrets solution + 4 projects
2026-07-15 16:24:38 -04:00
Joseph Doherty