I rotated my `LOCAL_BACKEND_API_KEY` and got into ...
# proj-agent-canvas
w
I rotated my
LOCAL_BACKEND_API_KEY
and got into a bad state. Specifically it seems the automation kv store is encrypted with the old key. Interestingly my agent found a
.automation-key
with the old secret (which is maybe a bad sign--dunno why it saved this to a file) and is now re-encrypting the kv store manually We should have tests for
LOCAL_BACKEND_API_KEY
rotation
l
Got it, just clarifying, did you rotate session api key or secret key?
Because being encrypted with secret key is probably desired behavior, but if it’s encrypted with session api key that’s clearly a bug
w
sorry it was
LOCAL_BACKEND_API_KEY
l
Hmm, we have a proliferation of keys 😂
I’m not even sure what that ones does…
w
that's the main backend key, that you fill in on the backends page
it gets autogenerated and hard-coded into the frontend if you don't set one
l
Got it, I thought that was SESSION_API_KEY, maybe we renamed it or the scope changed or something?
But yes, that shouldn’t be doing encryption since we have a separate SECRETS_KEY for that.
w
nod Yeah we renamed it because SESSION_API_KEY doesn't make much sense anymore
👍 1