lucydavinhart / api.lmhd.me

The shiny new LMHD API
1 stars 0 forks source link

Authenticate function currently only uses Public Certificate #6

Open lucymhdavies opened 3 years ago

lucymhdavies commented 3 years ago

This is not ideal, but given our API Client is iOS Shortcuts... I don't think there's much we can do about that.

We could send the private key to the API as well/instead... but that's not much better.

lucymhdavies commented 2 days ago

ideal would actually be get the OIDC JWT from Vault https://developer.hashicorp.com/vault/api-docs/secret/identity/oidc-provider