Mark/devforge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

API key stored/transmitted insecurely — plaintext in localStorage and unencrypted in DB #33

New issue
Closed
opened 2026-05-09 00:18:17 +00:00 by Mark · 3 comments
Mark commented 2026-05-09 00:18:17 +00:00
Owner
Copy link

API keys stored in localStorage as plaintext and in SQLite without encryption. Session secret hardcoded.

API keys stored in localStorage as plaintext and in SQLite without encryption. Session secret hardcoded.
Mark commented 2026-05-15 13:46:30 +00:00
Author
Owner
Copy link

Approved as bug. API keys stored in plaintext in localStorage and DB — needs encryption and secure storage.

Approved as bug. API keys stored in plaintext in localStorage and DB — needs encryption and secure storage.
Mark commented 2026-05-27 13:48:17 +00:00
Author
Owner
Copy link

GSD VERIFY phase failed after 3 attempts.
═══ Gate: verify-passed (devforge#33) ═══
Mode: Tier 1 (functional only)

GATE OK: All gates up to 'implement' pass
── Tier 1: Functional ────────────────────────────────
Running tests...
❌ Tests failed (exit 1)
 FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > decodeTerminalMessage > should return empty Uint8Array for Blob input in sync decoder
 FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > debug mode > should return false when debug is not enabled
 FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > debug mode > should return true when debug is enabled
 FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > debug mode > should disable debug mode
ReferenceError: localStorage is not defined
 ❯ services/web/src/utils/terminalUtils.test.ts:12:5
 10|  beforeEach(() => {
 11|  vi.restoreAllMocks();
 12|  localStorage.clear();
 |  ^
 13|  });
 14| 

⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯[4/9]⎯

 Test Files  4 failed | 1 passed (5)
 Tests  6 failed | 4 passed (10)
 Start at  06:48:15
 Duration  705ms (transform 519ms, setup 0ms, import 136ms, tests 12ms, environment 1ms)
Running linter...
✅ Lint clean
⚠️ No type checker discovered
No previous test result to compare

❌ GATE FAIL: verify-passed
- Tests failed with exit code 1
GATE FAIL: verify — blocked at 2026-05-27T13:48:17Z
Class: test-failure
Evidence: Verification failed: 1 failures
Git tag: devforge#33-gate-verify-fail-d8b03d138c09 (use gate-retry after fixing)

GSD VERIFY phase failed after 3 attempts. ═══ Gate: verify-passed (devforge#33) ═══ Mode: Tier 1 (functional only) GATE OK: All gates up to 'implement' pass ── Tier 1: Functional ──────────────────────────────── Running tests... ❌ Tests failed (exit 1)  FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > decodeTerminalMessage > should return empty Uint8Array for Blob input in sync decoder  FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > debug mode > should return false when debug is not enabled  FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > debug mode > should return true when debug is enabled  FAIL  services/web/src/utils/terminalUtils.test.ts > terminalUtils > debug mode > should disable debug mode ReferenceError: localStorage is not defined  ❯ services/web/src/utils/terminalUtils.test.ts:12:5  10|  beforeEach(() => {  11|  vi.restoreAllMocks();  12|  localStorage.clear();  |  ^  13|  });  14|  ⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯[4/9]⎯  Test Files  4 failed | 1 passed (5)  Tests  6 failed | 4 passed (10)  Start at  06:48:15  Duration  705ms (transform 519ms, setup 0ms, import 136ms, tests 12ms, environment 1ms) Running linter... ✅ Lint clean ⚠️ No type checker discovered No previous test result to compare ❌ GATE FAIL: verify-passed - Tests failed with exit code 1 GATE FAIL: verify — blocked at 2026-05-27T13:48:17Z Class: test-failure Evidence: Verification failed: 1 failures Git tag: devforge#33-gate-verify-fail-d8b03d138c09 (use gate-retry after fixing)
Mark commented 2026-05-29 17:10:03 +00:00
Author
Owner
Copy link

GSD PLAN: response missing GATE: line.

GSD PLAN: response missing GATE: line.
Mark closed this issue 2026-06-08 23:40:15 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
blocked:gate-plan

   
blocked:gate-research

   
blocked:lint-failed

   
blocked:needs-attention

Issue requires human attention to resolve

  
blocked:needs-decision

   
blocked:no-changes

   
blocked:no-procedure

   
blocked:verify-failed

   
bug

Bug report

  
chore

Config / cleanup / ops housekeeping

  
feature-request

   
in-progress

   
needs-research

Ready for research pipeline

  
ops-task

Operations task — install, configure, deploy, API calls

  
quickfix

   
security/medium

Medium severity security issue

  
triage-approved
No labels
blocked:gate-plan
blocked:gate-research
blocked:lint-failed
blocked:needs-attention
blocked:needs-decision
blocked:no-changes
blocked:no-procedure
blocked:verify-failed
bug
chore
feature-request
in-progress
needs-research
ops-task
quickfix
security/medium
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/devforge#33
No description provided.