Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

jwt passphrase - provide a way to set passphrase without storing it in the context config on disk #52

Open
shazron opened this issue Jul 8, 2020 · 2 comments
Assignees
Labels
enhancement New feature or request

Comments

@shazron
Copy link
Member

shazron commented Jul 8, 2020

The private key passphrase should not be stored in the config on disk, but the aio-lib-ims-jwt ims plugin requires it as a property on the context to unlock the private key. This is not secure. The passphrase is often a transient value provided as a flag via the CLI.

We need a way to:

  1. use an in-memory-context config that can be modified without it being written to disk (so you can set the passphrase property, for example)
  2. getToken should use this in-memory-context config
@shazron shazron added the enhancement New feature or request label Jul 8, 2020
@aiojbot
Copy link
Collaborator

aiojbot commented Jul 8, 2020

JIRA issue created: https://jira.corp.adobe.com/browse/ACNA-844

@kwin
Copy link

kwin commented Feb 6, 2021

I opened adobe/aio-lib-core-config#52 to support storing sensitive values in the system's keychain.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

5 participants