Commits on Nov 8, 2024

1. Upgrade to Panda v7 - support key rotation …

   This upgrades Panda from v3 to v7, allowing us to use key rotation as introduced with guardian/pan-domain-authentication#150.
   
   ### Necessary code changes
   
   * Panda v5
     * guardian/pan-domain-authentication#147 removed the old `PublicKey` & `PrivateKey` classes in our `com.gu.pandomainauth` package, in favour of using the existing `java.security` classes. To create instances of those classes, we can use the `SettingsReader.{privateKeyFor, publicKeyFor}` methods.
   * Panda v6:
     * guardian/pan-domain-authentication#152 means the `CookieUtils.generateCookieData()` method now communicates errors with `CookieResult` values containing `CookieIntegrityFailure`, rather than exceptions.
   * Panda v7:
     * guardian/pan-domain-authentication#150 means that code shouldn't directly reference private or public keys anymore (eg do not reference `settings.signingKeyPair`). Instead, use `settings.signingAndVerification` or `publicSettings.verification`. Note also that `publicSettings.publicKey` was previously optional, and `publicSettings.verification` is not.

   

   rtyley committed Nov 8, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 58ca049
   • Browse repository at this point

   Copy the full SHA

   58ca049 View commit details

   Browse the repository at this point in the history