opensourcepos

0 Fork 0

mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-09-22 18:55:03 -04:00

Files

T

jekkos 711e5d6b3f fix(security): make abortEncryptionConversion fail loudly on restore failure

The rollback path restored the .env backup with a suppressed
file_put_contents() and an unchecked file_get_contents(). If the restore
failed after the key had already been rotated, .env was left holding the new
CI4 key while the DB still held CI3-era ciphertext, so the data became
undecryptable after the next restart.

Now the backup read is checked for false and the restore goes through the
existing atomicWriteFile() helper; either failure throws so the error is
surfaced instead of silently corrupting the config. Adds a regression test
that forces an unreadable backup and asserts the throw plus that .env is
left untouched.

2026-09-21 11:54:41 +00:00

Commands

fix(security): run key-conversion as one locked transaction

2026-09-16 11:47:10 +00:00

Config

test(security): isolate helper FS tests via Config\SecurityEnv

2026-09-15 17:29:23 +00:00

Controllers

Merge branch 'master' into bugfix-escape-special-characters-in-env-key

2026-09-12 08:40:37 +04:00

Database

fix(security): run key-conversion as one locked transaction