nexarch/migrations/0009_ldap_bind_credentials.down.sql at refactor/common-batch-2 - nexarch - Gitea: Git with a cup of tea

scripte/nexarch

0 Fork 0

Files

T

patrickandClaude Sonnet 5 61dac85ff6 IAM-19: verschl-sselte-ablage-von-ldap-ad-bind-credentials

Speichert das LDAP-Bind-Passwort je Tenant ausschliesslich verschluesselt
mit dem Tenant-KEK aus API-10 (AES-256-GCM, kek.EncryptWithTenantKEK/
DecryptWithTenantKEK) statt in einem separaten Secret-Schema oder Klartext
(Keycloak-Antipattern bewusst vermieden). Neue Tabelle ldap_bind_config in
der Tenant-Datenbank (Migration 0009), neuer internal/ldapsync.ConfigStore
fuer Save/Get, rein additiv zu IAM-05 (Syncer/RoleMappingStore unveraendert).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QPsyieCYwvbUBsnN598SbP

2026-09-17 11:32:37 +02:00

2 lines

39 B

SQL

Raw Permalink Blame History

DROP TABLE IF EXISTS ldap_bind_config;