How do you do key rotation?

[fmpwizard]

Is there a way we can rotate the 32 byte long key? instead of forcing users to logout and log back in to use the new key?

[elithrar]

There is not currently a way to do this.

…

On Fri, Jul 7, 2017 at 2:45 PM Diego Medina ***@***.***> wrote: Is there a way we can rotate the 32 byte long key? instead of forcing users to logout and log back in to use the new key? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#65>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABIcCZtC_zW9nMMDkJT_dqfyyeDcX0cks5sLqcKgaJpZM4OReNy> .

[fmpwizard]

Thanks for your reply. I'll explore what it would take to implement such a feature and if it works well I'll send a PR for review (may be a few weeks before I get to it though).

[elithrar]

Note: I'd suggest a func RotatedKeys(keys []byte...) Option functional option that takes a slice of key material, and passes them to the underlying SecureCookie instance here: https://github.com/gorilla/csrf/blob/master/csrf.go#L152-L159

The library will need to use EncodeMulti & DecodeMulti to achieve this.

[stale]

This issue has been automatically marked as stale because it hasn't seen a recent update. It'll be automatically closed in a few days.