Encrypt credentials stored in peers table

PeerDB-io / peerdb

Fast, Simple and a cost effective tool to replicate data from Postgres to Data Warehouses, Queues and Storage

https://peerdb.io

Other

1.91k stars 60 forks source link

Encrypt credentials stored in peers table #1882

Closed iskakaushik closed 1 week ago

iskakaushik commented 1 week ago

This commit enhances security by encrypting peer options in the 'peers' table using AES encryption. AES was chosen for its reliability and widespread adoption in securing sensitive data. Changes include:

Added enc_key_id column to the peers table.
Modified LoadPeer and CreatePeerNoValidate functions to handle encryption/decryption.
Updated environment configuration to support encryption key management.

serprex commented 1 week ago

Need to also add decrypting to getPostgresPeerConfigs. Could revise that code to loop over peer names & use connectors.GetByNameAs[*connpostgres.PostgresConnector], but that'd have to make N queries instead of just 1