04/18 Enhance app functionalities: master password reset, account deletion/recovery

This commit is contained in:
2026-04-18 14:39:01 -04:00
parent 4d3f9844f0
commit f7fdb9db8a
10 changed files with 1186 additions and 2 deletions
+5
View File
@@ -34,6 +34,11 @@ class User(db.Model, UserMixin):
# Private key: JWK, AES-256-GCM encrypted with the user's vault key
sharing_private_key_enc = db.Column(db.Text, nullable=True)
sharing_private_key_iv = db.Column(db.String(64), nullable=True)
# Account recovery — enc_key_salt re-encrypted with a client-derived recovery key.
# NULL means the user has not set up a recovery code yet.
# The server never sees the recovery code — only the ciphertext of enc_key_salt.
recovery_enc_salt = db.Column(db.String(128), nullable=True)
recovery_iv = db.Column(db.String(64), nullable=True)
folders = db.relationship('Folder', backref='owner', lazy='dynamic', cascade='all, delete-orphan')
vault_items = db.relationship('VaultItem', backref='owner', lazy='dynamic', cascade='all, delete-orphan')