Keats / jsonwebtoken

JWT lib in rust
MIT License
1.62k stars 252 forks source link

Adding secrecy or zeroize for EncodingKey and DecodingKey #337

Open mettke opened 9 months ago

mettke commented 9 months ago

It probably makes sense to either add the https://crates.io/crates/secrecy or the https://crates.io/crates/zeroize crate to this crate. This way we can make sure that private and secret keys are securely erased from memory when dropped.

Keats commented 9 months ago

You mean in a custom Drop impl? I've used zeroize before so i would lean towards that