basalt / auth/src / SecretBoxLegacyOptions

Interface: SecretBoxLegacyOptions

Read-only compatibility with values written before the bka2 envelope. Accepting them re-opens the downgrade the envelope closes, so enable it only while migrating (SecretBox.reseal) and remove it afterwards.

Properties

plaintext?

> optional plaintext?: boolean

Defined in: auth/src/secret-box.ts:92

Accept a value with no envelope at all as plaintext.

v1Keys?

> optional v1Keys?: readonly (string | Uint8Array<ArrayBufferLike>)[]

Defined in: auth/src/secret-box.ts:90

Keys of the old v1: envelopes (the former mfaEncryptionKey).