Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introducing Auto-Expiry and Time-to-Birth Features for APKAM Keys #2074

Open
sitaram-kalluri opened this issue Aug 27, 2024 · 1 comment · Fixed by atsign-foundation/at_libraries#658, atsign-foundation/at_libraries#661 or #2085
Assignees
Labels
enhancement New feature or request

Comments

@sitaram-kalluri
Copy link
Member

sitaram-kalluri commented Aug 27, 2024

Is your feature request related to a problem? Please describe.

Currently, the APKAM keys do not have an auto-expiry feature. Enhance the APKAM keys by allowing users to set an auto-expiry, after which the keys will no longer be valid for authentication.

Additionally, introduce a time-to-birth mechanism, enabling users to specify when the atKeys will become active, alongside the existing time-to-live functionality.

Describe the solution you'd like

  • In the enrollment request, allow user to specify "TTL" and "TTB" which represents the time duration in minutes. When TTL represents "time to live", beyond which the APKAM keys will be inactive for usage.
  • When TTL is met, the APKAM keys cannot be used for authentication and subsequently the enrollment data will be deleted from the keystore.
@sitaram-kalluri
Copy link
Member Author

  • Completed the code the changes in at_commons, at_auth packages and are published.
  • Completed the code changes in at_secondary_server and changes are merged to trunk.
  • Completed the code changes in at_onboarding_cli. Pending work is to merge the PR to trunk.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment