Skip to content

Add fuzz tests for zod validators in invoices #1184#1387

Open
OluwapelumiElisha wants to merge 5 commits into
QuickLendX:mainfrom
OluwapelumiElisha:Add_fuzz_tests_for_Zod_validators_in_invoices
Open

Add fuzz tests for zod validators in invoices #1184#1387
OluwapelumiElisha wants to merge 5 commits into
QuickLendX:mainfrom
OluwapelumiElisha:Add_fuzz_tests_for_Zod_validators_in_invoices

Conversation

@OluwapelumiElisha

Copy link
Copy Markdown

📝 Description #1184

Adds an admin-only endpoint to rotate API key signing secrets without requiring key reissuance. Supports a configurable grace window (default 24h) where both old and new secrets remain valid, records audit events, and updates API documentation.

Key Changes

  • Added signing secret rotation endpoint: POST /api/v1/admin/api-keys/:id/rotate-signing-secret
  • Added previous secret hash and expiration fields to API key model
  • Implemented grace-period validation and rotation logic
  • Added audit trail logging for rotations
  • Protected endpoint with admin RBAC
  • Added tests and updated OpenAPI/auth documentation

Testing

  • Verified old/new secrets work during grace period
  • Verified old secret expires correctly
  • Verified audit logging
  • Verified non-admin access is rejected

Merge #1184

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant