Accounting Credential Store
Component Detail
Infrastructure
medium complexity
backend
0
Dependencies
1
Dependents
0
Entities
0
Integrations
Description
Secure storage layer for per-organization accounting system credentials. Encrypts API keys, client secrets, and endpoint URLs at rest before persisting to the database and decrypts on demand for use by accounting adapters.
accounting-credential-store
Responsibilities
- Encrypt credentials at rest using server-side key management before database persistence
- Decrypt credentials on demand and return them only to authorized adapter invocations
- Support credential rotation without exposing plaintext at any point in the cycle
Interfaces
storeCredentials(orgId, provider, credentials): Promise<void>
loadCredentials(orgId, provider): Promise<DecryptedCredentials>
deleteCredentials(orgId, provider): Promise<void>