[Management] Encrypt dictionary properties

[ibahloul]

:rainbow: Feature

As an API publisher, I want to encrypt some of my dictionary properties in order to comply with my company's security rules

:sunrise_over_mountains: Additional information

• Based on the encrypted properties behavior https://github.com/gravitee-io/issues/issues/5638
• User is able to encrypt a specific property in a static dictionary by toggling encrypted mode ON.
• If user toggle OFF an encrypted property, it reset value.
• Encrypted dictionary property isn't readable and also encrypted in database
• Quid of Dynamic dictionaries ? are they fully encrypted ?
• Need to move to an epic ?

:link: Dependencies

Link a story or other related things...

:camera: Mockups

:books: Documentation required

Provide link to the issue for documentation update

:superhero: Acceptance criteria

Manual dictionary

• [ ] Given a defined dictionary property with the encryption mode enabled, when I click on the SAVE button, then the property value is encrypted (read-only), it is hidden (e.g, "**"), and stored in the database
• [ ] Given a defined dictionary property, when I disable the encryption mode, then the value is reset
• [ ] Given a defined dictionary property with the encryption mode disabled, when I click on the "Save" button, then the property value is not encrypted, it is not hidden, and stored in the database
• [ ] Given an encrypted dictionary property with the encryption mode disabled, when I set a new value and I click on the "Save" button, then the property is stored in the database with the new value but not longer encrypted

Dynamic dictionary

• [ ] Given a dynamic dictionary with the encryption mode disabled, when I activate the dictionary encryption, then the value are hidden to the user and encrypted in database
• [ ] Given a dynamic dictionary with the encryption mode enabled, when I deactivate the dictionary encryption, then the value are visible to the user after the next synchronisation of the dictionary
• [ ] Given a dynamic dictionary with the encryption mode enabled, when the dictionary synchronize, then the value are still hidden

API Logs

• [ ] Given an API using encrypted dictionary properties, when I look at the logs (audit table) of this API, then the values of these properties do not appear in clear.
• [ ] Given an encrypted dynamic dictionary, when I look at the logs (audit table, dictionary related events) then the values of this dictionary do not appear in clear.

:warning: Potential impacts

Which other features may be impacted by this fix. This could be populated after fix

What are the impacted versions?

:heavy_check_mark: Definition of Done

For each User Story everything on the list must be considered, select only what was required

• [ ] Acceptance criteria met and tested
• [ ] Sonar Cloud quality gate passes
• [ ] CircleCi checks pass
• [ ] Cypress or Postman API check passes
• [ ] Test containers passed if modifications on the repository modules
• [ ] Translation for portal UI checked
• [ ] Developer created draft documentation PR
• [ ] New migration scripts checked Can be run multiple times but only makes changes the first time Display to user what script has done
• [ ] Validated on appropriate environment
• [ ] Existing test cases refactored

:rocket:

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.