fallbackSessionKeyHashPeppers property

List<String> fallbackSessionKeyHashPeppers
final

Fallback peppers for validating session keys created with previous peppers.

When rotating peppers, add the old pepper to this list to allow existing sessions to continue working. The system will try sessionKeyHashPepper first, then each fallback pepper in order until a match is found.

This is optional and defaults to an empty list.

Implementation

final List<String> fallbackSessionKeyHashPeppers;