Encrypted metadata

[chronark]

Preliminary Checks

• [X] I have reviewed https://unkey.com/docs for existing features that would solve my problem

• [X] I have searched for existing feature requests: https://github.com/unkeyed/unkey/issues

• [X] This issue is not a question, general help request, or anything other than a feature request directly related to Unkey. Please ask questions in our Discord community: https://unkey.com/discord.

Is your feature request related to a problem? Please describe.

Currently meta data is not encrypted and stores as plain text in the db, which is not suitable to store PII or other secrets.

Describe the solution

I have 2 ideas for this:

1. A flag to toggle encryption of the existing meta field
2. A new encryptedMeta field that can be used alongside the original meta, similar to how clerk has private and public metadata

Describe alternatives you have considered (if any)

No response

Additional context

No response

[linear[bot]]

ENG-1089 Encrypted metadata

[mvares]

@chronark, this could be divided into two parts: unsafe metadata and metadata

[chronark]

why "unsafe" over "encrypted"?

[mvares]

why "unsafe" over "encrypted"?

Really, "encrypted" is better