Remove hardcoded JWKS and ALWAYS_OK from the code?

Signalen / backend

Backend for Signalen, an application that helps cities manage and prioritize nuisance reports.

https://signalen.org

Mozilla Public License 2.0

5 stars 5 forks source link

Remove hardcoded JWKS and ALWAYS_OK from the code? #42

Closed bartjkdp closed 4 years ago

bartjkdp commented 4 years ago

The current codebase contains a:

Hardcoded JWKS
ALWAYS_OK flag to skip authentication

I would like to propose to remove these from the code as setting up an Identity Provider became much easier for developers with Dex. I think this improves the security and maintainability of the code.