Skip to content
This repository has been archived by the owner on Sep 17, 2021. It is now read-only.

Noob question - Configuring the Application #31

Closed
airforceboricua opened this issue Jul 25, 2014 · 2 comments
Closed

Noob question - Configuring the Application #31

airforceboricua opened this issue Jul 25, 2014 · 2 comments

Comments

@airforceboricua
Copy link

Hello,
I have am installing this software in a development environment for testing. I am to the part were I need to configure the application and I am stuck where I need to provide a 'secret_key' and a 'security_password_salt'.

Is the secret key referring to the AWS secret key for my aws iam? If not, how do I generate the secret key and the security password salt key the configuration is looking for?

SECRET_KEY = '<INSERT_RANDOM_STRING_HERE>'

SECURITY_PASSWORD_HASH = 'bcrypt'
SECURITY_PASSWORD_SALT = '<INSERT_RANDOM_STRING_HERE>'
SECURITY_POST_LOGIN_VIEW = 'https://ec2-XX-XXX-XXX-XXX.compute-1.amazonaws.com/''

Thank you for the assistance.

@scriptsrc
Copy link
Contributor

These are NOT your AWS secret keys.

SECRET_KEY
http://flask.pocoo.org/docs/api/#flask.Flask.secret_key

Set this to a complex random value when you want to use the secure cookie for instance.

This is just some random string that is used to sign cookies for user sessions.

SECURITY_PASSWORD_SALT
https://pythonhosted.org/Flask-Security/configuration.html

Specifies the HMAC salt. This is only used if the password hash type is set to something other than plain text. Defaults to None.

This is another random string that is used to salt passwords before they are hashed and placed into the database.

The output from a random password generator should be sufficient for both of these fields.

@airforceboricua
Copy link
Author

Thank you for the response. This was very helpful!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants