feat(security): implement IP verification and encryption for sensitive tokens

2026-09-11 13:17:12 +02:00
parent c3001cdd0a
commit 55618ffaed
10 changed files with 437 additions and 20 deletions
@@ -28,7 +28,7 @@ try {
            $stmt = $db->prepare("SELECT settings FROM integrations WHERE user_id = ? AND provider = 'JIRA'");
            $stmt->execute([$user['id']]);
            $saved = json_decode($stmt->fetchColumn() ?: '{}', true);
-            $apiToken = $saved['jira_api_token'] ?? '';
+            $apiToken = fociz_decrypt($saved['jira_api_token'] ?? '');
            if (empty($domain)) $domain = $saved['jira_domain'] ?? '';
            if (empty($email)) $email = $saved['jira_email'] ?? '';
        }
@@ -40,7 +40,7 @@ try {
            $settings = json_encode([
                'jira_domain'    => jira_normalize_domain($domain),
                'jira_email'     => $email,
-                'jira_api_token' => $apiToken,
+                'jira_api_token' => fociz_encrypt($apiToken),
                'account_name'   => $jiraUser['displayName'] ?? '',
                'account_id'     => $jiraUser['accountId'] ?? '',
            ]);