search

vicalloy / oidc-server

A self-hosted OIDC server
MIT License
63 stars 16 forks source link

Should we change secret_key in .env file? #1

Closed VityaSchel closed 2 years ago

VityaSchel commented 2 years ago

Hello, there seems to be a pre-defined secret_key in .env file, the word secret tells me to change this from default value, should we do that? If yes, what algorithm was used to generate this key and what are requirements for it?

vicalloy commented 2 years ago

Yes, you should change it.

VityaSchel commented 2 years ago

Yes, you should change it.

Ok, can you tell what are the requirements and how to generate it?

vicalloy commented 2 years ago

It's a random string, you can use openssl rand -hex 28 to generate it.