Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use RotatableJWKSet and add a console command for key rotation #14

Closed
5 of 6 tasks
Spomky opened this issue Sep 27, 2016 · 1 comment
Closed
5 of 6 tasks

Use RotatableJWKSet and add a console command for key rotation #14

Spomky opened this issue Sep 27, 2016 · 1 comment

Comments

@Spomky
Copy link
Member

Spomky commented Sep 27, 2016

The Jose library now offers an easy way to create a JWKSet and optionally rotate keys after a period of time.
This feature could be used so that the bundle will automatically create a JWKSet for signature operations and, if enabled, encryption depending on algorithms to use.
This feature will remove up to 15 configuration lines:

Because the developers should not care about cryptographic keys and algorithms, then

  • the signature algorithm should be set by default.
  • the encryption of the token could be always enabled (TBD).
  • the encryption algorithms should be set by default.

The bundle could also provide a console command to rotate keys if they are older than a period of time passed as an argument (e.g. bin/console lexik_jose:rotate-keys "7 days").

This will also fix #13.

  • RotatableJKWSet integration
  • Encryption for all tokens (security feature)
  • Console command for key rotation (security feature)
  • Console command for key regen (when an algorithm is changed)
  • Default signature algorithm in the configuration
  • Default encryption algorithms in the configuration
@Spomky Spomky added this to the v1.0.0 milestone Sep 27, 2016
@Spomky Spomky self-assigned this Sep 27, 2016
Spomky pushed a commit that referenced this issue Sep 28, 2016
@Spomky
Copy link
Member Author

Spomky commented Sep 30, 2016

Done.
Encryption option is let unchanged, but is still hightly recommended.

@Spomky Spomky closed this as completed Sep 30, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant