search

IdentityPython / oidc-op

An implementation of an OIDC Provider (OP)
Apache License 2.0
64 stars 26 forks source link

configuration session_key #68

Closed peppelinux closed 3 years ago

peppelinux commented 3 years ago

I'm getting troubles understanding how to document "session_key".

"session_key": {"filename": "private/session_jwk.json", "type": "OCT", "use": "sig", },

we have other methods that use this name but did different things and for different scopes.

in session manager we use a password to do encryption and decryption. where this "session_key" is involved for real in oidc-op operations?

peppelinux commented 3 years ago

@rohe so, can we remove session_key from the general configuration? https://github.com/IdentityPython/oidc-op/issues/60#issuecomment-847960907

if yes, it could be done in 2.0.0 if you agree

peppelinux commented 3 years ago

closed by https://github.com/IdentityPython/oidc-op/pull/70