feat(security): implement IP verification and encryption for sensitive tokens

2026-09-11 13:17:12 +02:00
parent c3001cdd0a
commit 55618ffaed
10 changed files with 437 additions and 20 deletions
@@ -137,7 +137,12 @@ $saveStmt = $db->prepare("
        settings = VALUES(settings),
        last_sync_at = NOW()
 ");
-$saveStmt->execute([$user['id'], $accessToken, $refreshToken, json_encode($newSettings)]);
+$saveStmt->execute([
+    $user['id'], 
+    fociz_encrypt($accessToken), 
+    fociz_encrypt($refreshToken), 
+    json_encode($newSettings)
+]);

 // 8. Succesvol terugkeren naar de gewenste pagina of het Persoonlijk Profiel
 $returnTo = $_SESSION['ms_oauth_return_to'] ?? '/profile.php';