feat: decrypt Jasypt values in .env and Spring files #80

2026-10-15T13:31:12+02:00

keb commented

2026-10-15 13:31:12 +02:00

ENC(...) values are decrypted on reveal, copy or get with
jasypt-spring-boot's default algorithm (3.0+, PBEWITHHMACSHA512ANDAES_256).

The password is, as in Spring, $JASYPT_ENCRYPTOR_PASSWORD, else the
file's own jasypt.encryptor.password (JASYPT_ENCRYPTOR_PASSWORD in a
.env), with ${VAR} and ${VAR:default} read from the environment.
Errors say which password was used, or which one is missing.
Secrets show a detail after their name: jasypt, or reference for a
Spring ${VAR}; also in Go to and Favourites.
A .env whose values are all Jasypt isn't marked as plain text in git.

🤖 Generated with Claude Code

ENC(...) values are decrypted on reveal, copy or get with jasypt-spring-boot's default algorithm (3.0+, PBEWITHHMACSHA512ANDAES_256). - The password is, as in Spring, $JASYPT_ENCRYPTOR_PASSWORD, else the file's own jasypt.encryptor.password (JASYPT_ENCRYPTOR_PASSWORD in a .env), with ${VAR} and ${VAR:default} read from the environment. - Errors say which password was used, or which one is missing. - Secrets show a detail after their name: jasypt, or reference for a Spring ${VAR}; also in Go to and Favourites. - A .env whose values are all Jasypt isn't marked as plain text in git. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

keb added 1 commit 2026-10-15 13:31:12 +02:00

feat: decrypt Jasypt values in .env and Spring files

CI / Checks (pull_request) Successful in 39s

Details

PR title / Conventional title (pull_request) Successful in 1s

Details

e1f86c72f7

ENC(...) values are decrypted on reveal, copy or get with
jasypt-spring-boot's default algorithm (3.0+, PBEWITHHMACSHA512ANDAES_256).

- The password is, as in Spring, $JASYPT_ENCRYPTOR_PASSWORD, else the
  file's own jasypt.encryptor.password (JASYPT_ENCRYPTOR_PASSWORD in a
  .env), with ${VAR} and ${VAR:default} read from the environment.
- Errors say which password was used, or which one is missing.
- Secrets show a detail after their name: jasypt, or reference for a
  Spring ${VAR}; also in Go to and Favourites.
- A .env whose values are all Jasypt isn't marked as plain text in git.

keb merged commit 17da9eaa32 into main

2026-10-15 13:31:58 +02:00

keb deleted branch feat/jasypt

2026-10-15 13:31:58 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: keb/lazysecrets#80