Method processBatchToTempTable

internal/commands/migrate.go:516–556

processBatchToTempTable processes a batch of keys and writes to temporary table

(keys []models.APIKey, oldService, newService encryption.Service)

// processBatchToTempTable processes a batch of keys and writes to temporary table
func (cmd *MigrateKeysCommand) processBatchToTempTable(keys []models.APIKey, oldService, newService encryption.Service) error {
	// Prepare batch data for insertion
	type TempMigration struct {
		ID          uint   `gorm:"primaryKey"`
		KeyValueNew string `gorm:"column:key_value_new"`
		KeyHashNew  string `gorm:"column:key_hash_new"`
	}

	var tempRecords []TempMigration

	for _, key := range keys {
		// 1. Decrypt using old service
		decrypted, err := oldService.Decrypt(key.KeyValue)
		if err != nil {
			return fmt.Errorf("key ID %d decryption failed: %w", key.ID, err)
		}

		// 2. Encrypt using new service
		encrypted, err := newService.Encrypt(decrypted)
		if err != nil {
			return fmt.Errorf("key ID %d encryption failed: %w", key.ID, err)
		}

		// 3. Generate new hash using new service
		newHash := newService.Hash(decrypted)

		tempRecords = append(tempRecords, TempMigration{
			ID:          key.ID,
			KeyValueNew: encrypted,
			KeyHashNew:  newHash,
		})
	}

	// Insert batch into temp table in a transaction
	return cmd.db.Transaction(func(tx *gorm.DB) error {
		if err := tx.Table("temp_migration").Create(&tempRecords).Error; err != nil {
			return fmt.Errorf("failed to insert batch into temp_migration: %w", err)
		}
		return nil
	})
}

// verifyTempColumns verifies temporary table data integrity
func (cmd *MigrateKeysCommand) verifyTempColumns() error {