Skip to content

Conversation

@kaapstorm
Copy link
Contributor

🦖 SAAS-19046

  • Uses Fernet symmetric encryption to store CommCare HQ API keys.
  • Migrates existing values

🐡


# Generate with `from cryptography.fernet import Fernet; Fernet.generate_key()`
FERNET_KEYS = [
'sGylGjTyNm64l4-F448DiMjS6cE1qZ9b5UZWPxTu2po=',

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this a test key? Does it make sense to remove it from this file since we would not want someone to accidentally use a publicly available test key in a production setup?

# Generate with `from cryptography.fernet import Fernet; Fernet.generate_key()`
FERNET_KEYS = [
'sGylGjTyNm64l4-F448DiMjS6cE1qZ9b5UZWPxTu2po=',
# Current key at the top, previous keys below

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the idea here to add automation to try older keys if the new one does not work? I don't see any such automation in this PR. Is that planned for the future, or does the list have a different purpose?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants