feat: implement key rotation system (#14710)

This commit is contained in:
Jon Ayers
2024-09-19 19:12:44 +01:00
committed by GitHub
parent dbe6b6c224
commit 2d5c068525
5 changed files with 1029 additions and 1 deletions

View File

@ -902,7 +902,11 @@ func CryptoKey(t testing.TB, db database.Store, seed database.CryptoKey) databas
seed.Feature = takeFirst(seed.Feature, database.CryptoKeyFeatureWorkspaceApps)
if !seed.Secret.Valid {
// An empty string for the secret is interpreted as
// a caller wanting a new secret to be generated.
// To generate a key with a NULL secret set Valid=false
// and String to a non-empty string.
if seed.Secret.String == "" {
secret, err := newCryptoKeySecret(seed.Feature)
require.NoError(t, err, "generate secret")
seed.Secret = sql.NullString{