Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generalize secret spec #2

Open
laurivosandi opened this issue Aug 24, 2023 · 0 comments
Open

Generalize secret spec #2

laurivosandi opened this issue Aug 24, 2023 · 0 comments

Comments

@laurivosandi
Copy link
Contributor

This essentially should split in half

The artifacts that are generated as needed:

  • Random strings
  • Public private key pairs possibly in different formats (DER, PEM)
  • Any derivatives of the above eg MD5, SHA256, PBKDF2, bcrypt

How to render them into secrets:

  • As-is
  • Hex encoded
  • Base64
  • Comma, space etc separated arrays
  • Unrolling arrays into different keys

The second half could be adopted by Passmower to render OIDC client secret as it's gotten already quite large and applications are expecting items in different formats. Most notably Freescout requires claims to be part of the auth uri as GET parameters.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant