v0.1.0 - Initial Release
🎉 Initial Release
Secure secrets management for TYPO3 with envelope encryption, access control, and audit logging.
Features
- Envelope Encryption: AES-256-GCM with libsodium, automatic key rotation
- TCA Integration:
vaultSecretrenderType for seamless form integration - FlexForm Support: Vault fields in FlexForm configurations
- Backend Module: Full CRUD interface for secrets management
- Audit Logging: Tamper-evident hash chain with export capabilities
- CLI Commands: Complete vault operations from command line
- HTTP Client: PSR-18 compliant with OAuth 2.0 (client_credentials, refresh_token)
- Access Control: Owner/group permissions with TYPO3 backend user integration
- Secret Rotation: Manual and automated rotation with version history
- Migration Wizard: Detect and migrate plaintext secrets to vault
Requirements
- PHP 8.5+
- TYPO3 v14.0+
- ext-sodium
Quality Assurance
| Metric | Value |
|---|---|
| PHPStan | Level 10 (max) |
| Architecture Tests | 22 PHPat rules |
| Unit Tests | 421 tests, 832 assertions |
| E2E Tests | 111 Playwright tests |
| Code Style | PER Coding Style |
Installation
composer require netresearch/nr-vaultDocumentation
See Documentation for setup and usage guides.