mirror of
https://github.com/DeBrosOfficial/orama.git
synced 2026-06-16 22:54:12 +00:00
123ca90b65
The base64 wrapper wasn't enough: DBSecretsManager scanned encrypted_value into []byte, so the rqlite client applied base64 binary semantics on read and the ciphertext never round-tripped — get_secret stayed empty. Mirror the proven push-credentials store exactly: encrypt to a 'enc:'-prefixed base64 string via pkg/secrets and scan the column into a STRING for Decrypt. Text round-trips cleanly through rqlite regardless of the BLOB column.