nickandClaude Sonnet 4.6 0b26fd86ad Encrypt Nextcloud passwords at rest, never return them via API ...

Passwords are encrypted with AES-256-GCM before being written to
users.json. The GET /api/users/:token endpoint no longer returns the
password field, so the settings form asks users to re-enter only when
changing it. Legacy plaintext passwords in users.json are decrypted
transparently and re-encrypted on next save.

Requires a new ENCRYPTION_KEY env var (64-char hex, 32 bytes).

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

2026-06-18 17:38:27 -07:00

..

index.html

Encrypt Nextcloud passwords at rest, never return them via API

2026-06-18 17:38:27 -07:00