Skip to content

localjwtauthority: Prep for rotation support - #1313

Open
Taahir Ahmed (ahmedtd) wants to merge 1 commit into
agent-substrate:mainfrom
ahmedtd:ca-rotation
Open

localjwtauthority: Prep for rotation support#1313
Taahir Ahmed (ahmedtd) wants to merge 1 commit into
agent-substrate:mainfrom
ahmedtd:ca-rotation

Conversation

@ahmedtd

Copy link
Copy Markdown
Collaborator
  • Add a RefreshingPool abstraction like localca.RefreshingPool. This provides caching (so we don't read the keys fresh from the filesystem) for each signing operation.
  • Extend ConcretePool so that it tracks which key is currently active for signing, instead of always picking the first key.

A followup PR will add admin commands for actually rotating the JWT pool.

* Add a RefreshingPool abstraction like localca.RefreshingPool.  This
  provides caching (so we don't read the keys fresh from the filesystem)
  for each signing operation.
* Extend ConcretePool so that it tracks which key is currently active
  for signing, instead of always picking the first key.

A followup PR will add admin commands for actually rotating the JWT
pool.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant