Skip to content

jwt passphrase - provide a way to set passphrase without storing it in the context config on disk #52

@shazron

Description

@shazron

The private key passphrase should not be stored in the config on disk, but the aio-lib-ims-jwt ims plugin requires it as a property on the context to unlock the private key. This is not secure. The passphrase is often a transient value provided as a flag via the CLI.

We need a way to:

  1. use an in-memory-context config that can be modified without it being written to disk (so you can set the passphrase property, for example)
  2. getToken should use this in-memory-context config

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions