@rubo / @LukaszRozmej this PR includes the previously suggested changes. Can continue the thread here.

I think this change might break setups in one case: if someone used dataDir + jwtSecret, it won’t read the old JWT anymore.

There was a more interesting approach in this pull request: #5979.

This approach will have to be discussed with other teams.

@ssonthal

True it would break setups, (same as changing the JwtSecretFile config would break setups unless you move the secrete to the new location and tell the consensus client about it).

Note:
if (x) implies that the result of line x is true the proceed otherwise do not.

So A way around that

1. if jwt-secret file path isn't specified then
2. if (1) check if jwt-secret file already exists in previous default directory (which was hard coded so should be a straightforward check).
3. if (2) then log a warning with the specified expected change and the continue with the old secret (or maybe move it to expected dir, and log that too!, moving makes sense because its a file managed by the client not the user.)
4. if (2) is not true then continue with the auto generation in the data directory path if it doesn't already exist.
5. if (1) is not true then continue as expected in (4).

Also, note there a bit of other things being generated in this directory, even after the change, you might want to change them too in another pr after a bit of discussion on what they are.

I think this change might break setups in one case: if someone used dataDir + jwtSecret, it won’t read the old JWT anymore.
There was a more interesting approach in this pull request: #5979.
This approach will have to be discussed with other teams.

@ssonthal

True it would break setups, (same as changing the JwtSecretFile config would break setups unless you move the secrete to the new location).

Note: if (x) implies that the result of line x is true the proceed otherwise do not.

So A way around that

1. if jwt-secret file path isn't specified then
2. if (1) check if jwt-secret file already exists in previous default directory (which was hard coded so should be a straightforward check).
3. if (2) then log a warning with the specified expected change and the continue with the old secret (or maybe move it to expected dir, and log that too!, moving makes sense because its a file managed by the client not the user.)
4. if (2) is not true then continue with the auto generation in the data directory path if it doesn't already exist.
5. if (1) is not true then continue as expected in (4).

Also, note there a bit of other things being generated in this directory, even after the change, you might want to change them too in another pr after a bit of discussion on what they are.

I will start working in this direction, then.

@obasekiosa can you check once now?

@ssonthal
still making changes?

Nope. You can review now.

Nope. You can review now.

@ssonthal

there are still requested but pending changes.
let me know if you can't see any on your end.

@obasekiosa no I can't see any request changes on my end.

@obasekiosa no I can't see any request changes on my end.

apologies, seems they've been on pending on my end.

you should see them now.

@obasekiosa can you check now?

Hi @MarekM25 / @rubo can we merge this?

@MarekM25 @rubo gentle reminder to merge this.

@ssonthal Can't be merged until unblocked by @MarekM25

Hey @MarekM25 this thread has been open for a while. Let's close this?

Hey @rubo , MarekM25 has approved. Shall we merge this?

@ssonthal Thanks. This was an annoying issue.