The original title is "API Key Rotation Without Downtime: Patterns and Implementation"

Short summary

Two practical patterns for zero-downtime API key rotation: a dual-key store that accepts both current and previous keys during an overlap window, and a versioned key scheme inspired by Stripe. Includes working Python and Go implementations with SHA-256 hashing and configurable expiry. The core insight is that the fix isn't deploying faster — it's accepting both keys simultaneously during a transition period.

• •Dual-key pattern: accept current + previous key with overlap window
• •Versioned key pattern: embed version ID in key, load matching secret
• •Both include working code with hash-only storage and configurable expiry

Generated with AI, which can make mistakes.