IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

Security: Add secrets service (#39418)

Browse Source 
* Add secrets service

* Revert accidental changes in util encryption

* Make minor changes

Move functional options to models

Revert renaming types to models

* Add context

* Minor change in GetDataKey

* Use CreateDataKeyWithDBSession in CreateDataKey

* Handle empty DEK name in DeleteDataKey

* Rename defaultProvider

* Remove secrets store service
This commit is contained in:
Tania B
2021-10-01 15:39:57 +03:00
committed by GitHub
parent a6a3ef74be
commit 62689ec804
12 changed files with 594 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/util/encryption.go
View File

@@ -15,6 +15,8 @@ import (
const saltLength = 8
// Decrypt decrypts a payload with a given secret.
// Deprecated. Do not use it.
// Use encryption.Service instead.
var Decrypt = func(payload []byte, secret string) ([]byte, error) {
if len(payload) < saltLength {
return nil, fmt.Errorf("unable to compute salt")
@@ -47,6 +49,8 @@ var Decrypt = func(payload []byte, secret string) ([]byte, error) {
}
// Encrypt encrypts a payload with a given secret.
// Deprecated. Do not use it.
// Use encryption.Service instead.
var Encrypt = func(payload []byte, secret string) ([]byte, error) {
salt, err := GetRandomString(saltLength)
if err != nil {