genecommerce / module-encryption-key-manager

Tooling to help generate and invalidate magento encryption keys
GNU Lesser General Public License v3.0
54 stars 14 forks source link

CLI to re-encrypt data in tfa_user_config table, closes #8 #20

Closed cjnewbs closed 1 month ago

cjnewbs commented 1 month ago

Fixes #8

Summary

Example output

The 2FA details can contain encrypted data within a json payload, which is also encrypted. So we navigate down and decrypt those values.

Running reencrypt-tfa-data
The latest encryption key is number 1, looking for old entries
Looking for encoded_config in tfa_user_config, identified by 'config_id'
########################################################################################################################
config_id: 1
ciphertext_old: 0:3:VYVmpwkM1mhg5qh0pX1fJg8kV9rWlWr7Q/aOl4CtbdHXaSOyPUJ7L92J8/JlwE86kAKiyAsXgztqBNqdbd6+Ct3z0vGAzguwe63rtjfhRffYzXwhugdTdDt4ov8lpfci66N86dSQddNdLJ+orrPgMNIf2daUFZMbPyviWkCnPGq/CA==
plaintext_old: {"google":{"secret":"0:3:k+zKqK36ipT7v9fff0bWTLBk1/OtYNHHizMUyZGAk2KyWcSFPFz+FKIdJQyy","active":true}}
plaintext_new: {"google":{"secret":"1:3:BW\/UG73qg8O9oqRqQJ3hqAW7YRuK1f+xoXFuxs46vaCytH3xqpsd8ADrqRsU","active":true}}
ciphertext_new: 1:3:ISY01PTteJ9wJkMjvEfbwNxtoMXeLz96y67yP5FkiDUAaznkz7/1J5yFQCsjs7LTuonEKrIZG8hIrPOf1qc/O6cajRcxdu3WzSe7qYMKErXIkhyvoKBmBTrnrVhgbQccsYp/FMBvhQPcUqiDXpShQVDPMFRT2q7Ray2KXjdvMdwRERs=
########################################################################################################################
Done