feat: use hash as pw & move to symmetric encrpytion

backend/src/db/migrations/20240528190137_secret_sharing.ts

@@ -8,7 +8,10 @@ export async function up(knex: Knex): Promise<void> {
     await knex.schema.createTable(TableName.SecretSharing, (t) => {
       t.uuid("id", { primaryKey: true }).defaultTo(knex.fn.uuid());
       t.string("name").notNullable();
-      t.text("signedValue").notNullable();
+      t.text("encryptedValue").notNullable();
+      t.text("iv").notNullable();
+      t.text("tag").notNullable();
+      t.text("hashedHex").notNullable();
       t.timestamp("expiresAt").notNullable();
       t.uuid("userId").notNullable();
       t.uuid("orgId").notNullable();

backend/src/db/schemas/secret-sharing.ts

@@ -10,7 +10,10 @@ import { TImmutableDBKeys } from "./models";
 export const SecretSharingSchema = z.object({
   id: z.string().uuid(),
   name: z.string(),
-  signedValue: z.string(),
+  encryptedValue: z.string(),
+  iv: z.string(),
+  tag: z.string(),
+  hashedHex: z.string(),
   expiresAt: z.date(),
   userId: z.string().uuid(),
   orgId: z.string().uuid(),