Merge pull request #47 from UniversitaDellaCalabria/melanger-patch-1

docs: thread-safe example config
UniversitaDellaCalabria · Nov 6, 2023 · eb8061a · eb8061a
2 parents 57e37ab + 5dffe80
commit eb8061a
Showing 1 changed file with 29 additions and 2 deletions.
diff --git a/example/oidcop_frontend.yaml b/example/oidcop_frontend.yaml
@@ -179,8 +179,21 @@ config:
  email:
  - urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword
  session_params:
- password: CHANGE_ME__password_used_to_encrypt_access_token_sid_value
- salt: 'CHANGE_ME salt involved in session sub hash'
+ encrypter:
+ class: cryptojwt.jwe.fernet.FernetEncrypter
+ kwargs:
+ password: CHANGE_ME__password_used_to_encrypt_access_token_sid_value
+ salt: 'CHANGE_ME salt involved in session sub hash'
+ keys:
+ key_defs:
+ - type: OCT
+ use:
+ - enc
+ kid: password
+ - type: OCT
+ use:
+ - enc
+ kid: salt
  sub_func:
  pairwise:
  class: idpyoidc.server.session.manager.PairWiseID
@@ -195,6 +208,20 @@ config:
  code:
  kwargs:
  lifetime: 600
+ crypt_conf:
+ kwargs:
+ password: CHANGE_ME__password_used_to_encrypt_authorization_code
+ salt: 'CHANGE_ME salt involved in authorization code hash'
+ keys:
+ key_defs:
+ - type: OCT
+ use:
+ - enc
+ kid: password
+ - type: OCT
+ use:
+ - enc
+ kid: salt
  id_token:
  class: idpyoidc.server.token.id_token.IDToken
  kwargs: