Lucas Berger d6d91201b1 feat(01-03): implement AES-256-GCM app-password encryption (T-03-01) ...

- encryptPassword: randomBytes(12) IV, aes-256-gcm, returns JSON {iv,authTag,ciphertext}
- decryptPassword: verifies GCM auth tag; throws on tamper
- Key from APP_PASSWORD_ENCRYPTION_KEY env (64-char hex); validated on each call
- No logging of plaintext or key

2026-06-04 10:27:40 -04:00

..

api

feat(01-03): implement AES-256-GCM app-password encryption (T-03-01)

2026-06-04 10:27:40 -04:00

pwa

feat(01-02): wire OIDC middleware, /api/me route, and authenticated PWA shell

2026-06-04 10:22:46 -04:00