Marc-André Bombeck bb24ad5c14 feat(admin): allow a guarded key-rotation run ...

Add an optional admin-triggered key rotation on pg-boss that re-encrypts
the whole encrypted-column corpus to the active key, reusing the same
column registry as the command-line tool (which stays the canonical path).
POST /api/admin/encryption/rotate enqueues a singleton run and is gated by
cookie-only admin plus a fresh second factor. The run is idempotent
(rows already on the active key are skipped), active-key-only, and never
adds or drops a key — the env key map stays operator-owned, so a key drop
remains a deliberate redeploy. It fails closed per row and reports totals
into the audit trail the status view reads.

2026-06-27 20:27:40 +02:00

..

rotate

feat(admin): allow a guarded key-rotation run

2026-06-27 20:27:40 +02:00

status

feat(admin): show encryption coverage and rotation progress

2026-06-27 20:27:31 +02:00