Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Server working without a JWT secret #30

Open
prunelsigma opened this issue Jun 12, 2020 · 0 comments
Open

[BUG] Server working without a JWT secret #30

prunelsigma opened this issue Jun 12, 2020 · 0 comments

Comments

@prunelsigma
Copy link
Contributor

Server working without a JWT secret

The server is working even without specifying a app.token.secret in configuration: the server ends up signing JWT using an empty secret

Steps To Reproduce

  1. Set up a configuration file without app.token.secret being defined
  2. Start the server
  3. Try to connect

Expected behavior

The server should not work with an empty secret (insecure) or at least write a warning in the logs.
Theapp.token.secret is required but the error is currently not handled (ignored).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant