[P6] feat: add encryption key rotation support

↗ view on GitHub · Dshamir · 2026-05-23 · acdfec42

Add keyRotation.ts with multi-key tryDecrypt that attempts all
configured secrets (USER_API_KEYS_ENCRYPTION_SECRET, _V2).
Update userApiKeys.ts to delegate encryption/decryption to the
rotation module for seamless key migration.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Repository Dshamir/AI-Legal
Author Dshamir <dshamir@blucap.ca>
Authored
Parents af5de5bb
Stats 2 files changed , +52 , -20
Part of Redis caching, HTTP cache headers, and encryption key rotation

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-acdfec42.md from inside the repo you want the change in.

⬇ Download capture-commit-acdfec42.md