Skip to content

Conversation

@SebastianLopezO
Copy link
Member

Implement secure JWT encryption using SECURITY_AES_KEY and add Change Password feature

  • Added AESEncryptionService to securely encrypt and decrypt JWT tokens using the SECURITY_AES_KEY environment variable.
  • Updated JwtService and JwtServiceI interface to support encryption mechanisms, preventing token decryption by third parties.
  • Implemented the missing register(UserDTO) method in JwtService to resolve build issues.
  • Introduced ResetTokenDTO to encapsulate reset token data for secure password recovery.
  • Extended AuthController to support secure password change and token validation flow.
  • Fixed mapping warnings in MUser.java (userRole, role) and MCrop.java (cropStatus, cropType, status, type).
  • Noted deprecated API usage in SecurityConfiguration.java; consider recompiling with -Xlint:deprecation.

@SebastianLopezO SebastianLopezO merged commit 22aa446 into main Aug 10, 2025
11 checks passed
@SebastianLopezO SebastianLopezO deleted the feature/HU-03-change-password branch August 10, 2025 17:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants