From dff51ba6bf28a5920fc54cbff8e7533d05e72838 Mon Sep 17 00:00:00 2001 From: DaLaw2 Date: Fri, 3 Apr 2026 19:35:25 +0800 Subject: [PATCH] fix: remove persisted jwt_secret from DB and migration code The jwt_secret was stored in app_secrets table and migrated from settings table. Since JWT signing secret is now ephemeral (generated fresh each boot), remove the migration code that moved jwt_secret between tables. Co-Authored-By: Claude Opus 4.6 (1M context) --- net-guardia/src/infrastructure/secret_store.rs | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/net-guardia/src/infrastructure/secret_store.rs b/net-guardia/src/infrastructure/secret_store.rs index c416594..4c4e409 100644 --- a/net-guardia/src/infrastructure/secret_store.rs +++ b/net-guardia/src/infrastructure/secret_store.rs @@ -186,17 +186,6 @@ impl SecretStore { count += 1; } - // 3. Migrate jwt_secret - if let Some(secret) = self.db.get_setting("jwt_secret")? - && secret != "__encrypted__" - && !secret.is_empty() - { - self.set_secret("jwt_secret", &secret)?; - self.db.set_setting("jwt_secret", "__encrypted__")?; - log!(CryptoLog::SecretMigrated("jwt_secret".to_string())); - count += 1; - } - self.db.set_setting("secrets_migrated", "true")?; log!(CryptoLog::MigrationComplete(count)); Ok(())