Add dynamic master key #2580
Description
New Feature / Enhancement Checklist
- I am not disclosing a vulnerability.
- I am not just asking a question.
- I have searched through existing issues.
Current Limitation
The master key is set on dashboard start and cannot be changed without a dashboard restart. This is disadvantageous when periodically rotating the keys because a key rotation also requires a dashboard restart.
Feature / Enhancement Description
- Allow to set an async function for the master key instead of a string.
- Add the master key to the internal cache with a TTL, so that the function is not called every time the master key is validated
Example Use Case
New Parse Dashboard options:
{
masterKey: async () => await getKey(),
masterKeyTtl: 3600
}
Alternatives / Workarounds
Dashboard restart.