Skip to content
This repository has been archived by the owner on Nov 27, 2017. It is now read-only.

Add client side state configuration variables to syndesis-rest #63

Open
zregvart opened this issue Jul 26, 2017 · 2 comments
Open

Add client side state configuration variables to syndesis-rest #63

zregvart opened this issue Jul 26, 2017 · 2 comments

Comments

@zregvart
Copy link
Member

Environment variables that need to be set:

  • CLIENT_STATE_AUTHENTICATION_ALGORITHM, value: HmacSHA1
  • CLIENT_STATE_AUTHENTICATION_KEY, value: random 20 bytes
  • CLIENT_STATE_ENCRYPTION_ALGORITHM, value: AES/CBC/PKCS5Padding
  • CLIENT_STATE_ENCRYPTION_KEY, value: random 16 bytes
  • CLIENT_STATE_TID, value: 1

Random values could be set in the environment of the user adding templates (similar to GITHUB_CLIENT_ID).

@zregvart
Copy link
Member Author

If these are not specified random key are generated and default algorithms are used. TID is set to a random long value. This is not well suited for clustered deployments and will not failover.

@rhuss
Copy link
Contributor

rhuss commented Aug 9, 2017

Would a randomly generated default value for the random data above be sufficient (as described in https://docs.openshift.com/container-platform/3.5/dev_guide/templates.html#writing-parameters) ?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants