feat: add cluster token encryption

2026-06-11 08:39:30 +02:00
parent 452d4c5f71
commit 82600bdf82
10 changed files with 542 additions and 0 deletions
@@ -42,6 +42,7 @@ func TestLoadOverrides(t *testing.T) {
 	t.Setenv("CONSOLE_PROXY_ADDR", ":9001")
 	t.Setenv("WORKER_CONCURRENCY", "12")
 	t.Setenv("REDIS_ADDR", "redis:6379")
+	t.Setenv("MASTER_KEY_BASE64", "test-key")

 	cfg, err := Load()
 	if err != nil {
@@ -66,6 +67,9 @@ func TestLoadOverrides(t *testing.T) {
 	if cfg.RedisAddr != "redis:6379" {
 		t.Fatalf("RedisAddr = %q, want redis:6379", cfg.RedisAddr)
 	}
+	if cfg.MasterKeyBase64 != "test-key" {
+		t.Fatalf("MasterKeyBase64 = %q, want test-key", cfg.MasterKeyBase64)
+	}
 }

 func TestLoadRejectsInvalidLogLevel(t *testing.T) {
@@ -105,6 +109,7 @@ func clearConfigEnv(t *testing.T) {
 		"SUPABASE_JWT_SECRET",
 		"REDIS_ADDR",
 		"APP_SITE_URL",
+		"MASTER_KEY_BASE64",
 	} {
 		t.Setenv(key, "")
 	}