Mercurial > p > roundup > code
view .codecov.yml @ 7809:be6cb2e0d471
feat: add support for rotating jwt keys
This allows jwt_secret to have multiple ',' separated secrets. The
first/leftmost should be used to sign new JWTs. All of them are used
(starting from left/newest) to try to verify a JWT.
If the first secret is < 32 chars in length JWTs are disabled. If any
of the other secrets are < 32 chars, the configuration code causes the
software to exit. This prevents insecure (too short) secrets from
being used.
Updated doc examples and tests.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Thu, 14 Mar 2024 19:04:19 -0400 |
| parents | a8741a95645a |
| children |
line wrap: on
line source
# - "path/to/folder" # ignore folders and all its contents # - "test_*.rb" # wildcards accepted # - "**/*.py" # glob accepted # - "[a-z]+/test_.*" # regexp accepted # ignore files that are build utils and not executed # code, or are deprecated. ignore: - "roundup/cgi/TAL/talgettext.py" # utility command - "roundup/cgi/TAL/DummyEngine.py" # test harness - "roundup/cgi/apache.py" # mod_python is deprecated - "roundup/install_util.py" # another build utlity - "roundup/dist" # more build utils - "roundup/test" # code used for testing