search

thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server
https://oauth2.thephpleague.com
MIT License
6.52k stars 1.12k forks source link

Change to Defuse key #1439

Closed adammeyer closed 1 month ago

adammeyer commented 1 month ago

I'd like to change from a string key to a \Defuse\Crypto\Key for the performance improvements.

Anyone find a way to add a "fallback" decryption to string key as to not invalidate all existing refresh tokens?

adammeyer commented 1 month ago

Built a solution by extending the RefreshTokenGrant class and building my own validateOldRefreshToken function. Worked great.