mirror of
https://github.com/saltbo/zpan.git
synced 2026-09-24 23:22:31 +08:00
14 lines
679 B
TypeScript
14 lines
679 B
TypeScript
// Cloud public keys for verifying PASETO v4 entitlement certificates.
|
|
//
|
|
// ZPan verifies every entitlement certificate against this list.
|
|
// Multiple keys are supported to allow zero-downtime key rotation:
|
|
// 1. Add the new key here and deploy ZPan.
|
|
// 2. Update the cloud Worker secret (LICENSE_SIGNING_KEY) to the new key and deploy.
|
|
// 3. After 24 h (old certs expired), remove the old key here and deploy ZPan again.
|
|
//
|
|
// Keys are PASERK k4.public.* strings (Ed25519, 32 raw bytes, base64url-encoded).
|
|
export const PUBLIC_KEYS: string[] = [
|
|
// cloud.zpan.space production key — provisioned 2026-04-24
|
|
'k4.public.N_r-lhhAfhR8sOk0pl8zlzU5dNRl2tvpUT94uODPZ1w',
|
|
]
|