[GitHub] [superset] craig-rueda commented on issue #15362: [SIP-70] Secret keys rotations and stop using single SECRET_KEY

[GitBox <gi...@apache.org>]

craig-rueda commented on issue #15362:
URL: https://github.com/apache/superset/issues/15362#issuecomment-874454750


   I'm all for this one, as long as the final impl is pluggable. I think I share @michael-s-molina 's concern in that the implementation shouldn't prevent us from being able to adapt the secret backend to whatever provider a user needs. I suggest adding the ability to configure different "providers" that can be overridden in configuration, with the default implementation just delegating to `SECRET_KEY` for backwards compatibility.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org