play.api.libs.Crypto is deprecated when Play2.5 released, then, removed when when Play2.6 released.
In order to use play2-auth with Play2.6, CryptoMigration is unavoidable.
This PR replaces play.api.libs.Crypto with Handmaid Signer(imitation of play.api.libs.Crypto).
Detail of Implemented Signer
Uses HMAC-SHA1 for signing (As Play2.4&2.5's Crypto do)
Gets secret from play.crypto.secretin application.conf (As Play2.4&2.5's Crypto do)
this is violating Key Separation Principle.This should be fixed when play2-auth support Play2.6.
Purpose of this PR
play.api.libs.Crypto is deprecated when Play2.5 released, then, removed when when Play2.6 released. In order to use play2-auth with Play2.6, CryptoMigration is unavoidable. This PR replaces play.api.libs.Crypto with Handmaid Signer(imitation of play.api.libs.Crypto).
Detail of Implemented Signer
play.crypto.secretinapplication.conf(As Play2.4&2.5's Crypto do)Key Separation Principle.This should be fixed when play2-auth support Play2.6.Reference link
https://www.playframework.com/documentation/2.5.x/Migration25 https://www.playframework.com/documentation/2.6.x/Migration26 https://www.playframework.com/documentation/2.6.x/CryptoMigration25