Security
Table of Contents
Classes
- EncryptableFieldService
- Layer 2: Transparent database field encryption.
- EncryptionService
- Core encryption service with dual V1/V2 algorithm support.
- FileEncryptionService
- Layer 1: Digital object file encryption.
- KeyManager
- Manages the master encryption key with key-ID tracking and purpose-specific subkey derivation.
- LoginSecurityService
- Login security service — brute force protection.
- PasswordPolicyService
- Password Policy Service — expiry and history enforcement.
- PasswordService
- PasswordService — single source of truth for password hashing + verification (security audit 2026-06-15, migration plan).
- TotpService
- TOTP (Time-based One-Time Password) Service.