Skip to main content

DEV_OAUTH_TOKEN_HMAC_KEY

headless_lms_server::programs::seed::seed_oauth_clients

Constant DEV_OAUTH_TOKEN_HMAC_KEY 

Source 
const DEV_OAUTH_TOKEN_HMAC_KEY: &str = "pippuri";
Expand description

The dev/CI HMAC key used to derive every stored client-secret digest below.

kubernetes/{dev,test}/headless-lms/env.yml are kind: Secret manifests, so Kubernetes base64-decodes each data: value before injecting it: OAUTH_TOKEN_HMAC_KEY: cGlwcHVyaQ== reaches the process as pippuri. Seeded digests must be HMAC-SHA-256(key = "pippuri", <secret>) or client-secret validation can never match.