Skip to content

Web token key fix#51

Merged
at88mph merged 8 commits intomainfrom
web-token-key-fix
Jan 30, 2026
Merged

Web token key fix#51
at88mph merged 8 commits intomainfrom
web-token-key-fix

Conversation

@at88mph
Copy link
Copy Markdown
Member

@at88mph at88mph commented Jan 29, 2026

Description

Relying on a sequence to generate a key in Redis is problematic as the sequence can be reset if the Redis pod is restarted or redeployed, resulting in users suddenly having an index to somebody else's login.

Changes

  • Use UUID for Redis key to prevent any collision or re-use of keys.
  • Rework to use newest RedisClient API
  • CI update to JDK 21
  • Modernize buildfiles

@at88mph at88mph merged commit 16f2e64 into main Jan 30, 2026
1 check passed
@at88mph at88mph deleted the web-token-key-fix branch January 30, 2026 18:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants