security fix

System.Common.ClientLib/Security/DesktopClientStorage.cs

@@ -1,4 +1,6 @@
 using System.Application.Repositories;
+using System.Application.Services;
+using System.Security.Cryptography;
 using System.Threading.Tasks;
 using KeyValuePair = System.Application.Entities.KeyValuePair;
 
@@ -6,26 +8,39 @@ namespace System.Security
 {
     internal sealed class DesktopClientStorage : Repository<KeyValuePair, string>, IStorage
     {
+        readonly ISecurityService ss;
+
+        public DesktopClientStorage(ISecurityService ss)
+        {
+            this.ss = ss;
+        }
+
         bool IStorage.IsNativeSupportedBytes => true;
 
+        static string GetKey(string key) => Hashs.String.SHA256(key);
+
         async Task<byte[]?> IStorage.GetBytesAsync(string key)
         {
+            key = GetKey(key);
             var item = await FirstOrDefaultAsync(x => x.Id == key);
             var value = item?.Value;
-            return value;
+            var value2 = await ss.DB(value);
+            return value2;
         }
 
         async Task InsertOrUpdateAsync(string key, byte[] value)
         {
+            var value2 = await ss.EB(value);
             await InsertOrUpdateAsync(new KeyValuePair
             {
                 Id = key,
-                Value = value,
+                Value = value2.ThrowIsNull(nameof(value2)),
             });
         }
 
         Task IStorage.SetAsync(string key, byte[]? value)
         {
+            key = GetKey(key);
             if (value == null || value.Length <= 0)
             {
                 return DeleteAsync(key);
@@ -38,6 +53,7 @@ namespace System.Security
 
         async Task<bool> IStorage.RemoveAsync(string key)
         {
+            key = GetKey(key);
             var result = await DeleteAsync(key);
             return result > 0;
         }