jgrusewski 763e5f12ae 🔐 Wave 112: Secrecy v0.10 Migration + MFA Tables ...

Migrated from secrecy v0.8 to v0.10 following anti-workaround protocol.
Proper upgrade to latest secure dependencies, not downgrade.

**Secrecy v0.10 Breaking Changes Fixed:**
- Changed `SecretBox<String>` → `SecretBox<str>` architecture
- Fixed 19 `.into_boxed_str()` conversions in MFA module
- Updated 19 SQLx DateTime calls (removed `.naive_utc()`, `.and_utc()`)
- Fixed 3 test SecretString instantiations

**Database Schema:**
- Created migration 017: MFA tables (4 tables + 2 functions)
  - mfa_config, mfa_backup_codes, mfa_enrollment_sessions, mfa_verification_log
  - Functions: is_mfa_required(), record_mfa_attempt()
- All 18 migrations now apply successfully

**SQLX_OFFLINE Workaround Eliminated:**
- Removed from .cargo/config.toml
- Removed from .env
- Database connection working properly at compile time

**Production Impact:**
- api_gateway library compiles cleanly ✅
- Production code unaffected by test errors
- Zero technical debt introduced
- Security posture improved (latest dependencies)

**Testing Status:**
- Pre-existing test errors remain (E0716 lifetimes, E0277 trait bounds)
- Not introduced by this migration
- Tracked for separate resolution

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-10-05 18:37:07 +02:00

3.0 KiB

Raw Blame History

View Raw