fetch_ml/internal/crypto/kms
Jeremie Fraeys 37c4d4e9c7
feat(crypto,auth): harden KMS and improve permission handling
KMS improvements:
- cache.go: add LRU eviction with memory-bounded caches
- provider.go: refactor provider initialization and key rotation
- tenant_keys.go: per-tenant key isolation with envelope encryption

Auth layer updates:
- hybrid.go: refine hybrid auth flow for API key + JWT
- permissions_loader.go: faster permission caching with hot-reload
- validator.go: stricter validation with detailed error messages

Security middleware:
- security.go: add rate limiting headers and CORS refinement

Testing and benchmarks:
- Add KMS cache and protocol unit tests
- Add KMS benchmark tests for encryption throughput
- Update KMS integration tests for tenant isolation
2026-03-12 12:04:32 -04:00
..
config feat(kms): implement core KMS infrastructure with DEK cache 2026-03-03 19:13:55 -05:00
providers feat(kms): add HashiCorp Vault and AWS KMS providers 2026-03-03 19:14:21 -05:00
cache.go feat(crypto,auth): harden KMS and improve permission handling 2026-03-12 12:04:32 -04:00
provider.go feat(crypto,auth): harden KMS and improve permission handling 2026-03-12 12:04:32 -04:00