jgrusewski
|
763e5f12ae
|
🔐 Wave 112: Secrecy v0.10 Migration + MFA Tables
Migrated from secrecy v0.8 to v0.10 following anti-workaround protocol.
Proper upgrade to latest secure dependencies, not downgrade.
**Secrecy v0.10 Breaking Changes Fixed:**
- Changed `SecretBox<String>` → `SecretBox<str>` architecture
- Fixed 19 `.into_boxed_str()` conversions in MFA module
- Updated 19 SQLx DateTime calls (removed `.naive_utc()`, `.and_utc()`)
- Fixed 3 test SecretString instantiations
**Database Schema:**
- Created migration 017: MFA tables (4 tables + 2 functions)
- mfa_config, mfa_backup_codes, mfa_enrollment_sessions, mfa_verification_log
- Functions: is_mfa_required(), record_mfa_attempt()
- All 18 migrations now apply successfully
**SQLX_OFFLINE Workaround Eliminated:**
- Removed from .cargo/config.toml
- Removed from .env
- Database connection working properly at compile time
**Production Impact:**
- api_gateway library compiles cleanly ✅
- Production code unaffected by test errors
- Zero technical debt introduced
- Security posture improved (latest dependencies)
**Testing Status:**
- Pre-existing test errors remain (E0716 lifetimes, E0277 trait bounds)
- Not introduced by this migration
- Tracked for separate resolution
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
|
2025-10-05 18:37:07 +02:00 |
|