Andrew B 6945b5a296 feat(security): warn when ActiveRecord encryption is not configured (#2362) ...

* feat(security): warn when ActiveRecord encryption is not configured

Self-hosted instances without explicit ACTIVE_RECORD_ENCRYPTION_* keys (or Rails credentials) store sensitive columns - API keys, provider/bank tokens, the MFA (TOTP) secret, and PII - unencrypted at rest. The app boots and works normally so this plaintext at rest state is easy to miss.

Change: Make it visible:
  - log a clear startup warning (config/initializers/encryption_warning.rb)
  - show a warning banner on /settings/security when encryption is unconfigured

* refactor(security): apply review feedback on encryption warning

- list the three ACTIVE_RECORD_ENCRYPTION_* keys in the banner, rendered via the DS::Alert content block to match the log
- drop the redundant respond_to?(:self_hosted?) guard in the initializer so it matches the controller check
- add a managed-mode test asserting the banner is hidden

2026-06-16 08:11:03 +02:00

..

api_keys_controller_test.rb

Add comprehensive API v1 with OAuth and API key authentication (#2389)

2025-06-17 15:57:05 -05:00

debugs_controller_test.rb

Add super_admin debug event log (#1816)

2026-05-17 16:55:01 +02:00

hostings_controller_test.rb

feat(ai): self-host settings UI for Anthropic provider (5/5) (#1987)

2026-06-09 23:00:04 +02:00

mcp_controller_test.rb

feat(mcp): OAuth 2.1 auth for MCP — connect Claude.ai with your Sure login (#2234)

2026-06-11 16:19:58 +02:00

payments_controller_test.rb

Hide contribution payments from demo user(s) (#738)

2026-01-23 12:35:49 +01:00

preferences_controller_test.rb

refactor: rename beta features gate to preview features (#1837)

2026-05-19 14:41:02 +02:00

profiles_controller_test.rb

fix(family-sharing): prevent silent data loss when rehoming or removing users (#1896)

2026-05-27 23:25:46 +02:00

providers_controller_test.rb

feat(provider): Akahu integration (#1921)

2026-06-02 21:44:57 +02:00

securities_controller_test.rb

feat(security): warn when ActiveRecord encryption is not configured (#2362)

2026-06-16 08:11:03 +02:00

webauthn_credentials_controller_test.rb

feat(auth): add WebAuthn MFA credentials (#1628)

2026-05-03 22:13:28 +02:00