Skip to content

Configuration overhaul: rename auth::secret_key to auth::user_claim_token_pepper #653

@josecelano

Description

@josecelano

Parent issue: #591

Rename auth::secret_key to auth::password_database_pepper

[auth]
secret_key = "MaxVerstappenWC2021"
[auth]
password_database_pepper = "MaxVerstappenWC2021"

Hi @da2ce7, the other day, when we decided to rename this field, I was wrong; the secret_key is only used to encode/decode (encrypt/decrypt) the JSON web token. We are using a HMAC secret that is not base64.

It's not used to encrypt database data. We are using MCF.

Currently, we support:

Should we use a different name @da2ce7? I mean, I don't think password_database_pepper makes sense.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions