Change JWT encryption from HMAC to RSA with rotating keys#37

Merged

Vianpyro merged 30 commits intomainfrom

security/use_rsa_for_jwt

Apr 14, 2025

Commits on Apr 7, 2025

Enhance Docker and JWT handling: update Dockerfile to install OpenSSL, modify jwt_helper to use RSA keys, and add entrypoint script for key generation
Vianpyro
committed

Commits on Apr 8, 2025

Implement JWT key rotation: add endpoint to rotate keys, update key management in jwt_helper, and modify .gitignore for key files
Vianpyro
committed
Refactor JWT key handling: remove hardcoded key loading, utilize dynamic key retrieval in token generation
Vianpyro
committed
Add timestamp logging for key creation in JWT rotation
Vianpyro
committed
Change route to be more RESTful
Vianpyro
committed
Remove JWT_SECRET_KEY from config and add script for cleaning up expired JWT keys
Vianpyro
committed
Refactor JWT tests to use public key for encoding/decoding and enhance sample token generation
Vianpyro
committed
Remove redundant sample_person_id fixture from test_refresh.py
Vianpyro
committed

Commits on Apr 10, 2025

Merge branch 'main' into security/use_rsa_for_jwt
Vianpyro
committed
Refactor key cleanup script to use dynamic expiry days from JWT configuration
Vianpyro
committed

Commits on Apr 11, 2025

Commits on Apr 13, 2025

Optimize payload generation

Vianpyro
and
Copilot
authored
Merge branch 'main' into security/use_rsa_for_jwt
Vianney Veremme
committed
Add key management functionality and refactor key paths
Vianney Veremme
committed
Refactor Dockerfile to remove entrypoint script and directly run key rotation before starting the app; update keys_rotation.py for improved key management and error handling.
Vianney Veremme
committed
Add OpenSSL installation steps for Linux, macOS, and Windows in Pytest CI workflow
Vianney Veremme
committed
Fix variable name inconsistency for key directory in jwtoken and keys_rotation modules
Vianney Veremme
committed
Refactor Dockerfile to use entrypoint script for key rotation and app startup; add entrypoint.sh for improved process management.
Vianney Veremme
committed
Reorganize Dockerfile to copy entrypoint script before exposing Flask port; ensure proper permissions are set for execution.
Vianney Veremme
committed
Remove entrypoint script copy command from Dockerfile; streamline application setup.
Vianney Veremme
committed
Update ENTRYPOINT in Dockerfile to use entrypoint.sh for improved process management
Vianney Veremme
committed
Update ENTRYPOINT in Dockerfile to use entrypoint.sh for improved process management
Vianney Veremme
committed
Refactor app.py to use ACTIVE_KID_FILE constant for key existence check; improve code readability.
Vianney Veremme
committed
Remove OpenSSL installation step for macOS in Pytest CI workflow; clarify that it's pre-installed.
Vianney Veremme
committed
Refactor datetime usage in token generation and logging setup; improve consistency and readability.
Vianney Veremme
committed
Remove entrypoint.sh and update ENTRYPOINT in Dockerfile to directly run app.py; streamline container startup process.
Vianney Veremme
committed
Add curl to fix healthcheck and remove cached libraries to save up space
Vianney Veremme
committed