parse-server icon indicating copy to clipboard operation
parse-server copied to clipboard

Dynamic master key and maintenance key

Open mtrezza opened this issue 1 year ago • 1 comments
trafficstars

New Feature / Enhancement Checklist

Current Limitation

The master key and maintenance key are both set on server start and cannot be changed without a server restart. This is disadvantageous when periodically rotating the keys because a key rotation also requires a server restart. This is particular problematic for a cluster of servers in which updating the keys across a large fleet can take a long time.

Feature / Enhancement Description

  • Allow to set an async function for the master key instead of a string.
  • Add the master key to the internal cache with a TTL, so that the function is not called every time the master key is validated

Example Use Case

New Parse Server options:

{
  masterKey: async () => await getKey(),
  masterKeyTtl: 3600,
}

Alternatives / Workarounds

Server restart.

mtrezza avatar Mar 25 '24 15:03 mtrezza

Thanks for opening this issue!

  • 🎉 We are excited about your ideas for improvement!

🎉 This change has been released in version 8.0.0-alpha.11

parseplatformorg avatar Feb 12 '25 21:02 parseplatformorg