Closed
Description
New Feature / Enhancement Checklist
- I am not disclosing a vulnerability.
- I am not just asking a question.
- I have searched through existing issues.
Current Limitation
The master key and maintenance key are both set on server start and cannot be changed without a server restart. This is disadvantageous when periodically rotating the keys because a key rotation also requires a server restart. This is particular problematic for a cluster of servers in which updating the keys across a large fleet can take a long time.
Feature / Enhancement Description
- Allow to set an async function for the master key instead of a string.
- Add the master key to the internal cache with a TTL, so that the function is not called every time the master key is validated
Example Use Case
New Parse Server options:
{
masterKey: async () => await getKey(),
masterKeyTtl: 3600,
}
Alternatives / Workarounds
Server restart.