Encrypt Hardcover Api Token and fix failing tests

src/app/api/user/hardcover-shelves/route.ts

@@ -8,6 +8,7 @@ import { requireAuth, AuthenticatedRequest } from '@/lib/middleware/auth';
 import { prisma } from '@/lib/db';
 import { fetchHardcoverList } from '@/lib/services/hardcover-sync.service';
 import { getJobQueueService } from '@/lib/services/job-queue.service';
+import { getEncryptionService } from '@/lib/services/encryption.service';
 import { z } from 'zod';
 import { RMABLogger } from '@/lib/utils/logger';
 
@@ -150,12 +151,15 @@ export async function POST(request: NextRequest) {
         );
       }
 
+      const encryptionService = getEncryptionService();
+      const encryptedToken = encryptionService.encrypt(apiToken);
+
       const shelf = await prisma.hardcoverShelf.create({
         data: {
           userId: req.user.id,
           name: listName,
           listId,
-          apiToken,
+          apiToken: encryptedToken,
           bookCount,
           coverUrls:
             initialBooks.length > 0 ? JSON.stringify(initialBooks) : null,

src/lib/services/hardcover-sync.service.ts

@@ -10,6 +10,7 @@ import axios from 'axios';
 import { prisma } from '@/lib/db';
 import { getAudibleService } from '@/lib/integrations/audible.service';
 import { createRequestForUser } from '@/lib/services/request-creator.service';
+import { getEncryptionService } from '@/lib/services/encryption.service';
 import { RMABLogger } from '@/lib/utils/logger';
 
 const logger = RMABLogger.create('HardcoverSync');
@@ -330,9 +331,22 @@ async function processShelf(
     `Fetching Hardcover List "${shelf.name}" (user: ${shelf.user.plexUsername})`,
   );
 
+  const encryptionService = getEncryptionService();
+  let decryptedToken = shelf.apiToken;
+  try {
+    // Check if the token is encrypted (our new storage method format)
+    if (encryptionService.isEncryptedFormat(shelf.apiToken)) {
+      decryptedToken = encryptionService.decrypt(shelf.apiToken);
+    }
+  } catch (err) {
+    log.error(
+      `Failed to decrypt API token for user ${shelf.user.plexUsername}`,
+    );
+  }
+
   let fetchedData: { listName: string; books: HardcoverApiBook[] };
   try {
-    fetchedData = await fetchHardcoverList(shelf.apiToken, shelf.listId);
+    fetchedData = await fetchHardcoverList(decryptedToken, shelf.listId);
   } catch (error) {
     log.error(
       `Failed to fetch Hardcover list "${shelf.name}": ${error instanceof Error ? error.message : 'Unknown error'}`,

src/lib/services/scheduler.service.ts

@@ -189,7 +189,9 @@ export class SchedulerService {
           await this.unscheduleJob(job);
         }
         await prisma.scheduledJob.delete({ where: { id: job.id } });
-        logger.info(`Removed deprecated scheduled job: ${job.name} (${job.type})`);
+        logger.info(
+          `Removed deprecated scheduled job: ${job.name} (${job.type})`,
+        );
       }
     } catch (error) {
       logger.error('Failed to cleanup deprecated scheduled jobs', {
@@ -222,11 +224,13 @@ export class SchedulerService {
         job.type,
         { scheduledJobId: job.id },
         job.schedule,
-        `scheduled-${job.id}`
+        `scheduled-${job.id}`,
       );
       logger.info(`Job scheduled: ${job.name} (${job.schedule})`);
     } catch (error) {
-      logger.error(`Failed to schedule job ${job.name}`, { error: error instanceof Error ? error.message : String(error) });
+      logger.error(`Failed to schedule job ${job.name}`, {
+        error: error instanceof Error ? error.message : String(error),
+      });
       throw error;
     }
   }
@@ -239,11 +243,13 @@ export class SchedulerService {
       await this.jobQueue.removeRepeatableJob(
         job.type,
         job.schedule,
-        `scheduled-${job.id}`
+        `scheduled-${job.id}`,
       );
       logger.info(`Job unscheduled: ${job.name}`);
     } catch (error) {
-      logger.error(`Failed to unschedule job ${job.name}`, { error: error instanceof Error ? error.message : String(error) });
+      logger.error(`Failed to unschedule job ${job.name}`, {
+        error: error instanceof Error ? error.message : String(error),
+      });
       // Don't throw - job might not exist in Bull yet
     }
   }
@@ -295,7 +301,7 @@ export class SchedulerService {
    */
   async updateScheduledJob(
     id: string,
-    dto: UpdateScheduledJobDto
+    dto: UpdateScheduledJobDto,
   ): Promise<ScheduledJob> {
     if (dto.schedule) {
       this.validateCronExpression(dto.schedule);
@@ -439,7 +445,8 @@ export class SchedulerService {
         throw new Error(errorMsg);
       }
 
-      libraryId = job.payload?.libraryId || absConfig['audiobookshelf.library_id'];
+      libraryId =
+        job.payload?.libraryId || absConfig['audiobookshelf.library_id'];
     } else {
       const plexConfig = await configService.getMany([
         'plex_url',
@@ -463,15 +470,18 @@ export class SchedulerService {
         throw new Error(errorMsg);
       }
 
-      libraryId = job.payload?.libraryId || plexConfig.plex_audiobook_library_id;
+      libraryId =
+        job.payload?.libraryId || plexConfig.plex_audiobook_library_id;
     }
 
-    logger.info(`Triggering ${backendMode} library scan for library: ${libraryId}`);
+    logger.info(
+      `Triggering ${backendMode} library scan for library: ${libraryId}`,
+    );
 
     return await this.jobQueue.addPlexScanJob(
       libraryId || '',
       job.payload?.partial,
-      job.payload?.path
+      job.payload?.path,
     );
   }
 
@@ -492,7 +502,6 @@ export class SchedulerService {
     return await this.jobQueue.addAudibleRefreshJob(job.id);
   }
 
-
   /**
    * Enable a scheduled job
    */
@@ -524,10 +533,12 @@ export class SchedulerService {
           await this.triggerJobNow(job.id);
 
           // Stagger triggers to avoid connection pool burst on startup
-          await new Promise(resolve => setTimeout(resolve, 500));
+          await new Promise((resolve) => setTimeout(resolve, 500));
         }
       } catch (error) {
-        logger.error(`Failed to trigger overdue job "${job.name}"`, { error: error instanceof Error ? error.message : String(error) });
+        logger.error(`Failed to trigger overdue job "${job.name}"`, {
+          error: error instanceof Error ? error.message : String(error),
+        });
       }
     }
   }
@@ -600,13 +611,22 @@ export class SchedulerService {
     if (dayOfMonth === '*' && month === '*' && dayOfWeek === '*') {
       const hourNum = parseInt(hour, 10);
       const minuteNum = parseInt(minute, 10);
-      if (!isNaN(hourNum) && !isNaN(minuteNum) && hourNum >= 0 && hourNum <= 23 && minuteNum >= 0 && minuteNum <= 59) {
+      if (
+        !isNaN(hourNum) &&
+        !isNaN(minuteNum) &&
+        hourNum >= 0 &&
+        hourNum <= 23 &&
+        minuteNum >= 0 &&
+        minuteNum <= 59
+      ) {
         return 24 * 60 * 60 * 1000; // 24 hours
       }
     }
 
     // For other patterns, return a conservative default (24 hours)
-    logger.warn(`Unknown cron pattern "${cronExpression}", defaulting to 24 hours`);
+    logger.warn(
+      `Unknown cron pattern "${cronExpression}", defaulting to 24 hours`,
+    );
     return 24 * 60 * 60 * 1000;
   }
 
@@ -656,7 +676,7 @@ export class SchedulerService {
    * Trigger Reading shelves sync
    */
   private async triggerSyncShelves(job: any): Promise<string> {
-    return await this.jobQueue.addSyncShelvesJob(job.id, undefined, 'goodreads');
+    return await this.jobQueue.addSyncShelvesJob(job.id);
   }
 }