search

mdouchement / standardfile

Yet Another Standardfile (standardnotes server) Implementation written in Golang
MIT License
80 stars 9 forks source link

Add clarification on JWT and PASETO parameters in config file #70

Closed valantur closed 1 year ago

valantur commented 3 years ago

Hi, I'm sorry to open an issue request about this because this isn't really an issue... it's just that it's unclear to me whether I should change any of the JWT and PASETO parameters on the standardfile.yml file before deploying the server. I couldn't find a wiki for this project or any other documentation, so my apologies in advance if it's all explained somewhere else.

Thanks!

mdouchement commented 3 years ago

Hello, no worries. JWT token is the old authentication système. Since the API version 20200115 (latest) and protocol version 004 (latest), Standard Notes uses the session mechanism. Within the session object, the access_token and refresh_token are generated with PASETO.

This project is following the Standard Notes specification.