mgonzalez/project.linkedcorp.net
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: version 2.7.0 -- menu Contraseñas (repositorio de credenciales privado)

Browse Source 
Nuevo modulo backend/src/modules/vault/: contraseña y notas cifradas
en el servidor (AES-256-GCM, mismo mecanismo ya usado para la clave
SMTP). Acceso al menu protegido con un PIN de 4 digitos independiente
del login (token corto propio, header X-Vault-Token, nunca el JWT de
sesion). El PIN no participa del cifrado -- cambiarlo o restablecerlo
por correo nunca afecta las contraseñas ya guardadas. Privado por
usuario, sin excepcion. Cada accion sensible (crear/editar/eliminar/
revelar/desbloquear) queda en audit_log. Compartir con otro usuario
queda para una proxima version.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Milton Gonzalez
2026-10-01 12:12:54 -05:00
parent f607455668
commit 0be0712ff0
20 changed files with 879 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/services/api.js
+6 -6
View File
@@ -9,8 +9,8 @@ function getToken() {
return localStorage.getItem('plc_token');
}
async function request(method, path, { body, isForm } = {}) {
const headers = {};
async function request(method, path, { body, isForm, extraHeaders } = {}) {
const headers = { ...extraHeaders };
const token = getToken();
if (token) headers.Authorization = `Bearer ${token}`;
if (!isForm && body !== undefined) headers['Content-Type'] = 'application/json';
@@ -38,11 +38,11 @@ async function request(method, path, { body, isForm } = {}) {
}
export const api = {
get: (path) => request('GET', path),
post: (path, body) => request('POST', path, { body }),
put: (path, body) => request('PUT', path, { body }),
get: (path, extraHeaders) => request('GET', path, { extraHeaders }),
post: (path, body, extraHeaders) => request('POST', path, { body, extraHeaders }),
put: (path, body, extraHeaders) => request('PUT', path, { body, extraHeaders }),
patch: (path, body) => request('PATCH', path, { body }),
delete: (path) => request('DELETE', path),
delete: (path, extraHeaders) => request('DELETE', path, { extraHeaders }),
postForm: (path, formData) => request('POST', path, { body: formData, isForm: true }),
putForm: (path, formData) => request('PUT', path, { body: formData, isForm: true }),
setToken: (token) => {