Skip to content

Commit c6612a5

Browse files
Add Gantt chart visualization for key rotation schedule in IdentityServer documentation.
1 parent 5ecc303 commit c6612a5

File tree

1 file changed

+43
-2
lines changed

1 file changed

+43
-2
lines changed

src/content/docs/identityserver/fundamentals/key-management.md

Lines changed: 43 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,8 +60,49 @@ has passed, keys are removed from discovery, and optionally deleted.
6060

6161
The default is to rotate keys every 90 days, announce new keys with 14 days of
6262
propagation time, retain old keys for a duration of 14 days, and to delete keys
63-
when they are retired. All of these options are configurable in the
64-
`KeyManagement` options. For example:
63+
when they are retired.
64+
65+
```mermaid
66+
---
67+
config:
68+
theme: default
69+
gantt:
70+
useWidth: 800
71+
useMaxWidth: false
72+
---
73+
gantt
74+
title 90 Day Key Rotation Schedule per Signing Algorithm
75+
76+
section RS256
77+
Announce :rsa_a, 2025-01-01, 14d
78+
Signing :active, rsa_s, after rsa_a, 62d
79+
Retire :rsa_r, after rsa_s, 14d
80+
Delete :crit, :rsa_d, after rsa_r, 1d
81+
82+
%%{space}%%
83+
84+
Announce :rsa_na, 2025-03-03, 14d
85+
Signing :active, rsa_ns, after rsa_na, 62d
86+
Retire :rsa_nr, after rsa_ns, 14d
87+
Delete :crit,:rsa_nd, after rsa_nr, 1d
88+
89+
%%{space}%%
90+
91+
section ES256
92+
Announce :es_a, 2025-01-01, 14d
93+
Signing :active, es_s, after es_a, 62d
94+
Retire :es_r, after es_s, 14d
95+
Delete :crit, :es_d, after es_r, 1d
96+
97+
%%{space}%%
98+
99+
Announce :es_na, 2025-03-03, 14d
100+
Signing :active, es_ns, after es_na, 62d
101+
Retire :es_nr, after es_ns, 14d
102+
Delete :crit, :es_nd, after es_nr, 1d
103+
```
104+
105+
All of these options are configurable in the `KeyManagement` options. For example:
65106

66107
```cs
67108
// Program.cs

0 commit comments

Comments
 (0)