Amin Ghadersohi 6d6d88c63f feat(storage): Fernet key rotation via MultiFernet + EXTENSION_STORAGE_ENCRYPTION_KEYS ...

- _fernet() now returns MultiFernet built from EXTENSION_STORAGE_ENCRYPTION_KEYS
  (falls back to SECRET_KEY).  New encryptions use the first key; all keys are
  tried on decryption, giving zero-downtime rotation.
- New CLI command: superset rotate-extension-storage-keys
  Re-encrypts every is_encrypted row with the current (first) key via
  MultiFernet.rotate(). Run after prepending a new key and restarting.
- EXTENSION_STORAGE_ENCRYPTION_KEYS added to config.py with rotation docs.
- Re-enable is_encrypted=true in notebook saves now that rotation is supported.
- Tests: key_rotation_roundtrip and multi_fernet_decrypts_old_key.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-07 11:23:23 -07:00

..

common

refactor: Enable G logging rules and comprehensive ruff improvements (#35081)

2025-09-15 12:42:49 -07:00

consts

…

example_data

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

fixtures

chore: enforce more ruff rules (#31447)

2024-12-18 17:41:34 -08:00

integration_tests

fix(reports): PUT with empty recipients list does not persist the change (#38711)

2026-03-27 12:54:13 +01:00

unit_tests

feat(storage): Fernet key rotation via MultiFernet + EXTENSION_STORAGE_ENCRYPTION_KEYS

2026-04-07 11:23:23 -07:00

__init__.py

…

conftest.py

fix: Bump pandas to 2.1.4 for python 3.12 (#34999)

2025-09-19 09:18:00 -07:00