Method encrypt

src/server/web/auth/adapter.ts:188–195

Encrypts a plaintext string with AES-256-GCM for session storage.

(plaintext: string)

  /** Encrypts a plaintext string with AES-256-GCM for session storage. */
  encrypt(plaintext: string): string {
    const iv = randomBytes(12);
    const cipher = createCipheriv("aes-256-gcm", this.key, iv);
    const ciphertext = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
    const tag = cipher.getAuthTag();
    // Layout: iv(12) | tag(16) | ciphertext
    return Buffer.concat([iv, tag, ciphertext]).toString("base64url");
  }

  /** Decrypts a value produced by {@link encrypt}. Returns null on failure. */
  decrypt(encoded: string): string | null {