Allow for rotating keys on signed (and also possibly encrypted) cookies

rwf2 / cookie-rs

HTTP cookie parsing and cookie jar management for Rust.

https://docs.rs/cookie

Apache License 2.0

309 stars 117 forks source link

Allow for rotating keys on signed (and also possibly encrypted) cookies #158

Open Fishrock123 opened 4 years ago

Fishrock123 commented 4 years ago

The background here is from keygrip which Express.js uses for it's cookie signing.

The idea is that the end user can rotate their keys, adding a new one which signs all new cookies while still allowing older cookies to be verified for a (probably lengthy) time.

SergioBenitez commented 3 years ago

See my comments on #161.