JanssenProject / JanssenProject/jans
Corner Case: Key Rotation (single server) timer may trigger regeneration after keys expire
Open
comp-jans-auth-server
kind-bug
needs-triage
- Dominant language
- Java
- Stars
- 647
- Forks
- 173
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 110
Description
If Auth-Server is restarted right before the `keyRegenerationInterval` is triggered, the keys will expire before rotation. This can lead to the expired keys that I was experiencing (i.e the interval is 48 hours but the server is restarted every 36 hours the keys may never rotate).
Contributor guide
Assessment
This issue has not been assessed yet.