WrenSecurity / wrenam

Community fork of OpenAM, an authentication and authorization system originally developed by ForgeRock.
Other
43 stars 27 forks source link

Ignore keystore update when no key change was performed. #108

Closed karelmaxa closed 1 year ago

karelmaxa commented 1 year ago

I have changed the way the Wren:AM handles updating keys in the keystore. With this change, the update is only performed when necessary (key is missing or password is changed).

This change is essential for environments where the keystore is read-only (such as Docker / Kubernetes deployments), or where the keystore is under version control (prior to this change, each time Wren:AM was launched, the keystore file was modified).