-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
Security 2024-07-22, Security 2024-08-05, Security 2024-08-19
Create the jwkLifetimeMins server parameter, and use it to set the expiration date on the server-generated JWK keys. Additionally, ensure that we are checking the JWK expiration dates as soon as possible before loading them, and are not using those expired keys to validate tokens.
- depends on
-
SERVER-91645 Build the shard implementation of AuthSessionTokenManager
-
- Needs Scheduling
-
- is depended on by
-
SERVER-91658 Create a listPublicAuthTokens aggregation doc source
-
- Needs Scheduling
-
-
SERVER-91659 Create an expireAuthToken command
-
- Needs Scheduling
-
-
SERVER-91661 Create a PeriodicJob to delete expired JWK keys
-
- Needs Scheduling
-