Commits on Mar 4, 2022

1. Native support for key rotation in verifications …

   Add native support for key rotation for ES*, Ed*, HS*, RS*, and PS*
   verifications.
   
   In those SigningMethod's Verify implementations, also allow the key to
   be the type of the slice of the supported key type, so that the caller
   can implement the KeyFunc to return all the accepted keys together to
   support key rotation.
   
   While key rotation verification can be done on the callers' side without
   this change, this change provides better performance because:
   
   - When trying the next key, the steps before actually using the key do
     not need to be performed again.
   
   - If a verification process failed for non-key reasons (for example,
     because it's already expired), it saves the effort to try the next
     key.
   
   The native key rotation support also helps callers to get more accurate
   errors.

   

   fishy committed Mar 4, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 12abf75
   • Browse repository at this point

   Copy the full SHA

   12abf75 View commit details

   Browse the repository at this point in the history