integrations: Connector interface + encrypted token vault #9

Closed
opened 2026-04-13 14:23:19 +00:00 by alvis · 1 comment
Owner

Define Connector interface: beginOAuth, finishOAuth, fetchSignals, optional act. Implement column-level encryption (libsodium sealed box) for stored credentials. Key from env/KMS. Unit tests with a fake connector.

Define `Connector` interface: `beginOAuth`, `finishOAuth`, `fetchSignals`, optional `act`. Implement column-level encryption (libsodium sealed box) for stored credentials. Key from env/KMS. Unit tests with a fake connector.
alvis added this to the M0 — Prototype milestone 2026-04-13 14:23:19 +00:00
alvis added the backend label 2026-04-13 14:23:19 +00:00
Author
Owner

Closed: token vault exists in integration_tokens table. Encryption (libsodium) deferred to M2 security hardening.

Closed: token vault exists in `integration_tokens` table. Encryption (libsodium) deferred to M2 security hardening.
alvis closed this issue 2026-04-16 15:23:03 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alvis/oO#9