[devices] public key operations

[capcom6]

Confidence Score: 5/5

This PR is safe to merge with minimal risk

Summary

This PR adds public key infrastructure for end-to-end encryption. The changes add two nullable columns to the devices table: public_key (text) and key_version (int), exposed through device registration and update endpoints.

Major changes:

• E2E key storage — devices can now register an RSA public key with version tracking for key rotation
• Phone number expansion — recipient phone number storage increased from 128 to 512 characters
• Documentation — new CHANGELOG.md documents the public key feature and updated .env.example with clarified config descriptions

Diagram

sequenceDiagram
    participant Client as Android App
    participant Handler as Mobile Handler
    participant Service as Device Service
    participant Repo as Repository
    participant DB as MySQL

    Note over Client,DB: Device Registration with E2E Key
    Client->>Handler: "POST /mobile/v1/device<br/>{publicKey, keyVersion, ...}"
    Handler->>Handler: Validate (go-playground/validator)
    Handler->>Service: RegisterDevice(publicKey, keyVersion)
    Service->>Repo: Insert(device)
    Repo->>DB: "INSERT INTO devices<br/>(public_key, key_version, ...)"
    DB-->>Repo: OK
    Repo-->>Service: Device
    Service-->>Handler: Device
    Handler-->>Client: "201 {id, token}"

    Note over Client,DB: Key Rotation via Update
    Client->>Handler: "PATCH /mobile/v1/device<br/>{publicKey, keyVersion}"
    Handler->>Handler: Validate new key pair
    Handler->>Service: Update(publicKey, keyVersion)
    Service->>Repo: Update(device)
    Repo->>DB: "UPDATE devices<br/>SET public_key=?, key_version=?"
    DB-->>Repo: OK
    Repo-->>Service: OK
    Service-->>Handler: OK
    Handler-->>Client: 204 No Content

Loading

_{Reviews (39) · Last reviewed commit: "[docs] create changelog, update dotenv e..." · Reviewed by Greptile}

[github-actions]

🤖 Pull request artifacts

Platform	File
🐳 Docker	GitHub Container Registry
🍎 Darwin arm64	server_Darwin_arm64.tar.gz
🍎 Darwin x86_64	server_Darwin_x86_64.tar.gz
🐧 Linux arm64	server_Linux_arm64.tar.gz
🐧 Linux i386	server_Linux_i386.tar.gz
🐧 Linux x86_64	server_Linux_x86_64.tar.gz
🪟 Windows arm64	server_Windows_arm64.zip
🪟 Windows i386	server_Windows_i386.zip
🪟 Windows x86_64	server_Windows_x86_64.zip

[greptile-apps]

Want your agent to iterate on Greptile's feedback? Try greploops.

[capcom6]

@greptile review

[github-actions]

This PR is stale because it has been open for 7 days with no activity.

[github-actions]

This PR is stale because it has been open for 7 days with no activity.

[github-actions]

This PR is stale because it has been open for 7 days with no activity.

[greptile-apps]

Comments Outside Diff

These findings could not be posted inline.

•  E2E consistency not validated on device registration internal/sms-gateway/modules/devices/service.go:42 ▶

  The ErrInconsistentE2E guard exists in Update, but Insert has no equivalent check. RegisterDevice calls devicesSvc.Insert directly, so a registration request that supplies publicKey without keyVersion (or vice versa) bypasses the pairing validation entirely and persists the inconsistent state to the DB - exactly the case Update is designed to prevent.