Enhancement/refactor encryption#91

Merged

codebyNorthsteep merged 11 commits into

mainfrom

enhancement/refactorEncryption

Apr 28, 2026

Commits on Apr 26, 2026

Add `ssn_hash` column to Staff and EmploymentForm; update schema migration
codebyNorthsteep
committed
Enhance SSN security: Add `ssn_salt` column, update constraints and indexes; include `commons-codec` dependency for hashing
codebyNorthsteep
committed

Commits on Apr 27, 2026

Refactor SSN handling: remove `ssn_salt` fields, add HMAC-based hashing with `hmacKey` for search, update encryption configuration and schema migration
codebyNorthsteep
committed
Refactor SSN handling: simplify masking logic, improve role-based SSN access, and update schema constraints
codebyNorthsteep
committed
Refactor EmploymentForm and Staff services: implement SSN hashing, update validation logic, and streamline encryption handling
codebyNorthsteep
committed
Refactor encryption handling: update encryption properties, implement HMAC-based SSN hashing, and enhance SSN access control in services
codebyNorthsteep
committed
Enhance SSN display and access control: implement dynamic SSN view toggling, update EmploymentForm and Staff services to apply SSN policy based on user roles, and improve styling for SSN elements
codebyNorthsteep
committed
Seed database with initial admin users, additional staff for testing, and pending employment forms; update DataInitializer with enhanced staff and employment form creation logic.
codebyNorthsteep
committed
Refactor SSN handling and access control: update regex for SSN validation, add non-null constraints for `ssn_hash`, remove role-based SSN masking policy, and streamline encryption handling; update …
codebyNorthsteep
committed
Enhance encryption handling: update documentation for AES-256 key generation, clarify encryption and decryption processes, and add unique index for SSN hash in database
codebyNorthsteep
committed

Commits on Apr 28, 2026

Enhance encryption validation: implement fail-fast checks for encryption and HMAC keys to ensure strong security at startup
codebyNorthsteep
committed