search

patrickpissurno / fastify-esso

The easiest authentication plugin for Fastify, with built-in support for single sign-on (SSO)
https://npm.im/fastify-esso
MIT License
52 stars 6 forks source link

Dynamic secrets #23

Open HeikoMueller opened 3 months ago

HeikoMueller commented 3 months ago

Replaced the static secret in opts with a dynamic setEssoSecret setter function.

The plugin keeps track of the current and the previously set secret. Can be used for dynamic secret rotation.

@patrickpissurno Please have a look if this might have security implications.