feat: decrypt Jasypt values in .env and Spring files

Conversation 0 Commits 1 Files Changed 13

+381 -29

1 Commits

Author	SHA1	Message	Date
keb	e1f86c72f7	feat: decrypt Jasypt values in .env and Spring files CI / Checks (pull_request) Successful in 39s Details PR title / Conventional title (pull_request) Successful in 1s Details ENC(...) values are decrypted on reveal, copy or get with jasypt-spring-boot's default algorithm (3.0+, PBEWITHHMACSHA512ANDAES_256). - The password is, as in Spring, $JASYPT_ENCRYPTOR_PASSWORD, else the file's own jasypt.encryptor.password (JASYPT_ENCRYPTOR_PASSWORD in a .env), with ${VAR} and ${VAR:default} read from the environment. - Errors say which password was used, or which one is missing. - Secrets show a detail after their name: jasypt, or reference for a Spring ${VAR}; also in Go to and Favourites. - A .env whose values are all Jasypt isn't marked as plain text in git.	2026-10-15 13:31:05 +02:00

Author

SHA1

Message

Date

keb

e1f86c72f7

feat: decrypt Jasypt values in .env and Spring files

CI / Checks (pull_request) Successful in 39s

Details

PR title / Conventional title (pull_request) Successful in 1s

Details

ENC(...) values are decrypted on reveal, copy or get with
jasypt-spring-boot's default algorithm (3.0+, PBEWITHHMACSHA512ANDAES_256).

- The password is, as in Spring, $JASYPT_ENCRYPTOR_PASSWORD, else the
  file's own jasypt.encryptor.password (JASYPT_ENCRYPTOR_PASSWORD in a
  .env), with ${VAR} and ${VAR:default} read from the environment.
- Errors say which password was used, or which one is missing.
- Secrets show a detail after their name: jasypt, or reference for a
  Spring ${VAR}; also in Go to and Favourites.
- A .env whose values are all Jasypt isn't marked as plain text in git.

2026-10-15 13:31:05 +02:00

feat: decrypt Jasypt values in .env and Spring files #80