Skip to content

Instantly share code, notes, and snippets.

@admiyo

admiyo/gist:3085149

Created July 10, 2012 17:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save admiyo/3085149 to your computer and use it in GitHub Desktop.
Save admiyo/3085149 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
Plan for Signed tokens.
1. By default disable PKI signed tokens
2. Ensure that auth_token middle ware falls back to online validation if the key is =< 32 chars
3. Make sure that once we enable signed tokens, hashed tokens continue to work until they are timed out.
4. when upgrading the database, maintain all of the hashed tokens.
5. Once the Signed tokens code has been accepted and somewhat tested, switch the default to enable PKI signed tokens.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment