atinux / nuxt-auth-utils

Add Authentication to Nuxt applications with secured & sealed cookies sessions.
MIT License
962 stars 90 forks source link

Provide a way to rotate the session password #202

Open tobiasdiez opened 1 month ago

tobiasdiez commented 1 month ago

It is advised that one rotates every security-related credential on some time interval (and of course after a breach). To make this easier, there should be a bultin functionality to specify a second password that is used to decrypt old sessions (while the primary password is used to en/decrypt new sessions).