sessionKeyHashPepper property

String sessionKeyHashPepper
final

The pepper used for hashing authentication session keys.

This influences the stored session hashes, so it must not be changed for a given deployment, as otherwise all sessions become invalid.

To rotate peppers without invalidating existing sessions, use fallbackSessionKeyHashPeppers.

Implementation

final String sessionKeyHashPepper;