KRYSTALM7 commented on issue #101: URL: https://github.com/apache/fineract-loan-origination/issues/101#issuecomment-5644880511
Thanks @paultofunmi for flagging, this was picked up towards the end of GSoC and the implementation is complete locally but was not pushed before the programme ended. The stash contains the full RSA-2048 payload encryption implementation across the backend and frontend. The network tab confirms the login payload is encrypted end-to-end — `ciphertext` and `wrappedKey` are transmitted instead of plaintext credentials. **What's implemented (unpushed):** Backend: - `CryptoKeyController.java` — RSA public key endpoint - `src/main/java/.../crypto/` — encryption/decryption logic - `AuthController.java`, `FineractAuthenticationProvider.java`, `RateLimitFilter.java` — updated to handle encrypted payloads - `application.yml` — crypto configuration Frontend: - `payload-encryption.service.ts` — fetches public key and encrypts login payload - `auth.service.ts`, `staff-auth.service.ts` — updated to use encryption service I will clean up and open a pull request for this shortly. <img width="1917" height="912" alt="Image" src="https://github.com/user-attachments/assets/81c1710d-82ae-499d-92ec-75a46c053599"; /> <img width="977" height="425" alt="Image" src="https://github.com/user-attachments/assets/01eb03f8-2e49-4432-92d5-87951b92cdb9"; /> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
