This repository was archived by the owner on Mar 22, 2022. It is now read-only.
Repository navigation
This repository was archived by the owner on Mar 22, 2022. It is now read-only.
RSA token secret #309
Description
Moved from main repo feathersjs/feathers#423
Using node-rsa, export it to keyfile, as default token secret rather than hardcode it in config file will be better option I think. Reduce unnecessary steps to create new (good) token, production ready, and rotating it in every x days/wk/mo will make it more secure.
Activity
marshallswain commentedon Oct 12, 2016
Rotating the token secret will invalidate all existing token, but after we implement real refresh token support it won't really be an issue.
[-]RSA token[/-][+]RSA token secret[/+]daffl commentedon Feb 9, 2017
The new generator has a secret generator (see https://github.com/feathersjs/generator-feathers/blob/master/generators/secret/index.js) which I think is all we'll do for now.