openkfw / TruBudget

A blockchain-based workflow tool for efficient and transparent project management
https://openkfw.github.io/trubudget-website/
GNU General Public License v3.0
83 stars 39 forks source link

#1658 api: JWT with RS256 #1761

Closed SamuelPull closed 2 months ago

SamuelPull commented 3 months ago

Checklist

Some other services also use JWT_SECRET in certain scenarios. Check if there are further changes needed.

Description

How to test

  1. Set new env vars: JWT_ALGORITHM=RS256, JWT_SECRET=base 64 pem encoded private key, JWT_PUBLIC_KEY=base 64 pem encoded public key
  2. log in
  3. token cookie should be RS256
  4. do some stuff
  5. old configuration should work too (no JWT_ALGORITH, or set to HS256, no public key, whatever secret)

Closes #1658

github-actions[bot] commented 3 months ago
Warnings
:warning: No CHANGELOG added.

Generated by :no_entry_sign: dangerJS against 2184ba2e5d071299b9f74bc0a6689c4781b565f6

openkfwCI commented 3 months ago
NotesTime
:white_check_mark:Note for Reviewer: E2E tests on pipeline 58500 on remote server succeededFri, 12 Apr 2024 07:15:27 +0000

Generated by E2E-Test