Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

sample_config claims that macaroon_secret_key is used to sign access tokens #12050

Closed
richvdh opened this issue Feb 21, 2022 · 1 comment · Fixed by #13443
Closed

sample_config claims that macaroon_secret_key is used to sign access tokens #12050

richvdh opened this issue Feb 21, 2022 · 1 comment · Fixed by #13443
Labels
A-Docs things relating to the documentation T-Task Refactoring, removal, replacement, enabling or disabling functionality, other engineering tasks. Z-Help-Wanted We know exactly how to fix this issue, and would be grateful for any contribution

Comments

@richvdh
Copy link
Member

richvdh commented Feb 21, 2022

... which has not really been true since #5588

@richvdh
Copy link
Member Author

richvdh commented Feb 21, 2022

It is still used for (I think):

  • Short-term login tokens. These are used as part of the single-sign-on (OIDC or SAML2) flow.
  • Access tokens for guest users (read-only accounts).
  • Email unsubscribe links. These use special access tokens that only let you unsubscribe from email notifications.

@erikjohnston erikjohnston added A-Docs things relating to the documentation T-Task Refactoring, removal, replacement, enabling or disabling functionality, other engineering tasks. Z-Help-Wanted We know exactly how to fix this issue, and would be grateful for any contribution labels Feb 23, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
A-Docs things relating to the documentation T-Task Refactoring, removal, replacement, enabling or disabling functionality, other engineering tasks. Z-Help-Wanted We know exactly how to fix this issue, and would be grateful for any contribution
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants