fix: keep RDP creds out of tunnel URL/logs via single-use encrypted stash

2026-07-17 11:28:00 +01:00
parent 138f708a87
commit 332c7760ca
4 changed files with 72 additions and 5 deletions
@@ -16,4 +16,7 @@ type ConsoleSession struct {
 	StartedAt time.Time     `bson:"started_at" json:"started_at"`
 	EndedAt   *time.Time    `bson:"ended_at,omitempty" json:"ended_at,omitempty"`
 	ClientIP  string        `bson:"client_ip,omitempty" json:"client_ip,omitempty"`
+
+	RDPUserEnc string `bson:"rdp_user_enc,omitempty" json:"-"`
+	RDPPassEnc string `bson:"rdp_pass_enc,omitempty" json:"-"`
 }