feat(keys): Check lastAuthAt freshness when fetching key data.

mozilla / fxa-oauth-server

OAuth server for Firefox Accounts

48 stars 40 forks source link

feat(keys): Check lastAuthAt freshness when fetching key data. #502

Closed rfk closed 6 years ago

rfk commented 6 years ago

For a future world where the keyRotationSecret is actually a secret value, we should only return it to users who have proved that they recently know the account password. @vladikoff r?