Regenerate API Key

// Example: Automated quarterly key rotation
const rotateApiKeys = async () => {
  const keys = await getActiveApiKeys();
  
  for (const key of keys) {
    const ageInDays = (Date.now() - new Date(key.created_at)) / (1000 * 60 * 60 * 24);
    
    if (ageInDays > 90) { // Rotate every 90 days
      console.log(`Rotating key: ${key.name}`);
      
      const response = await regenerateKey(key.id, { grace_period_days: 14 });
      
      if (response.success) {
        // Update configuration management system
        await updateKeyInConfigSystem(key.name, response.new_key);
        
        // Schedule reminder to verify deployment
        scheduleVerificationReminder(key.name, response.migration_info.old_key_expires_at);
      }
    }
  }
};

// Emergency key rotation - immediate revocation
const emergencyRotateKey = async (keyId) => {
  const response = await regenerateKey(keyId, { 
    revoke_immediately: true 
  });
  
  if (response.success) {
    // Immediately update all environments
    await Promise.all([
      updateProductionKey(response.new_key),
      updateStagingKey(response.new_key),
      updateDevelopmentKey(response.new_key)
    ]);
    
    // Alert team
    await sendSecurityAlert(`Key ${keyId} rotated due to compromise`);
  }
};

// Check transition status
const checkKeyTransition = async (keyId) => {
  const response = await fetch(`/api/keys/${keyId}`, {
    headers: { 'Authorization': `Bearer ${secretKey}` }
  });
  
  const keyInfo = await response.json();
  
  if (keyInfo.transition_ends_at) {
    const timeRemaining = new Date(keyInfo.transition_ends_at) - new Date();
    const daysRemaining = Math.ceil(timeRemaining / (1000 * 60 * 60 * 24));
    
    console.log(`Key transition ends in ${daysRemaining} days`);
    
    if (daysRemaining <= 2) {
      console.warn('⚠️  Key transition ending soon - ensure new key is deployed');
    }
  }
};