Ory
-
|
Are the HMAC Strategy keys just supposed to be RSA keys and how many are recommended? Also should these be generated up front or something that would get updated over time? |
Beta Was this translation helpful? Give feedback.
Replies: 0 comments 9 replies
-
|
Thank you for the question! Could you please point to the code in question to establish content? Generally HMAC-SHA can be used with both symmetric and asymmetric keys so it really depends on which feature you're using :) |
Beta Was this translation helpful? Give feedback.
-
|
If you rotate (change) a secret add it to the list. If you never changed the secrets, leave it empty |
Beta Was this translation helpful? Give feedback.
-
|
@aeneasr Looks like that struct doesn't have built in functionality to add a new one. If I wanted to add one after a rotation, would I move the current global secret to the list of rotated secrets then change the global secret to the new one? |
Beta Was this translation helpful? Give feedback.
-
|
exactly |
Beta Was this translation helpful? Give feedback.
-
|
@aeneasr I submitted a pull request to fosite that does this internally :) |
Beta Was this translation helpful? Give feedback.
-
|
awesome! |
Beta Was this translation helpful? Give feedback.
Thank you for the question! Could you please point to the code in question to establish content? Generally HMAC-SHA can be used with both symmetric and asymmetric keys so it really depends on which feature you're using :)