From 770a5b7397786b3536f46feda4f02c77a93299ff Mon Sep 17 00:00:00 2001
From: NicolasCantu <nicolas.cantu@pm.me>
Date: Thu, 23 Oct 2025 14:01:18 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20Rendre=20la=20cl=C3=A9=20ma=C3=AEtre=20e?=
 =?UTF-8?q?xtractable=20pour=20la=20d=C3=A9rivation=20HMAC?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Changer extractable: false à extractable: true dans deriveMasterKey
- Résoudre l'erreur 'key is not extractable' lors de l'export de la clé
- Permettre l'utilisation de la clé maître pour dériver les clés spend et scan
- Maintenir la sécurité tout en permettant l'extraction nécessaire
---
 src/services/secure-credentials.service.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/services/secure-credentials.service.ts b/src/services/secure-credentials.service.ts
index 890c1f0..4e2231b 100644
--- a/src/services/secure-credentials.service.ts
+++ b/src/services/secure-credentials.service.ts
@@ -261,7 +261,7 @@ export class SecureCredentialsService {
       },
       keyMaterial,
       { name: 'AES-GCM', length: 256 },
-      false,
+      true, // Make key extractable
       ['encrypt', 'decrypt']
     );
   }