feat: add cluster token encryption

backend/cmd/api/main.go

@@ -18,6 +18,8 @@ import (
 
 	"proxui/backend/internal/auth"
 	"proxui/backend/internal/authorization"
+	"proxui/backend/internal/cluster"
+	"proxui/backend/internal/encryption"
 	"proxui/backend/internal/membership"
 	"proxui/backend/internal/profile"
 	"proxui/backend/internal/rbac"
@@ -42,6 +44,13 @@ func main() {
 		os.Exit(1)
 	}
 	authMiddleware := auth.NewMiddleware(jwtValidator)
+	tokenCipher, err := encryption.NewFromBase64(cfg.MasterKeyBase64)
+	if err != nil {
+		logger.Error("failed to initialize cluster token encryption", "error", err)
+		os.Exit(1)
+	}
+	_ = tokenCipher
+
 	db, err := openDatabase(cfg.DatabaseURL)
 	if err != nil {
 		logger.Error("failed to connect database", "error", err)
@@ -52,6 +61,8 @@ func main() {
 	profileMiddleware := profile.NewMiddleware(profile.NewRepository(db), logger)
 	membershipMiddleware := membership.NewMiddleware(membership.NewRepository(db), logger)
 	authorizationMiddleware := authorization.NewMiddleware()
+	clusterRepository := cluster.NewRepository(db, tokenCipher)
+	_ = clusterRepository
 
 	mux := http.NewServeMux()
 	mux.HandleFunc("GET /healthz", func(w http.ResponseWriter, r *http.Request) {