From d5598f54ac3c12c8a864a61bc8fdb28baa60a754 Mon Sep 17 00:00:00 2001 From: alexeh Date: Mon, 7 Aug 2023 00:33:49 +0300 Subject: [PATCH] Add different secrets for different tokenization strategies --- api/config/custom-environment-variables.json | 4 +++- api/config/default.json | 4 +++- api/config/test.json | 4 +++- 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/api/config/custom-environment-variables.json b/api/config/custom-environment-variables.json index 5c1ea852e3..55a295cbba 100644 --- a/api/config/custom-environment-variables.json +++ b/api/config/custom-environment-variables.json @@ -12,7 +12,9 @@ "signUpIsPublic": "SIGN_UP_IS_PUBLIC", "jwt": { "expiresIn": "JWT_EXPIRES_IN", - "secret": "JWT_SECRET" + "secret": "JWT_SECRET", + "accountActivationSecret": "JWT_ACTIVATION_SECRET", + "passwordRecoverySecret": "JWT_RESET_SECRET" }, "password": { "minLength": "PASSWORD_MIN_LENGTH", diff --git a/api/config/default.json b/api/config/default.json index fac9ba0561..ed6d80b7fd 100644 --- a/api/config/default.json +++ b/api/config/default.json @@ -18,7 +18,9 @@ "signUpIsPublic": true, "jwt": { "expiresIn": "2h", - "secret": null + "secret": null, + "accountActivationSecret": "mySecretForAccountActivation", + "passwordRecoverySecret": "mySecretForPasswordReset" }, "password": { "minLength": 6, diff --git a/api/config/test.json b/api/config/test.json index bb6f910cdd..718a8f3467 100644 --- a/api/config/test.json +++ b/api/config/test.json @@ -27,7 +27,9 @@ "requireUserAccountActivation": true, "jwt": { "expiresIn": "1d", - "secret": "myVeryBadJWTSecretForTests" + "secret": "myVeryBadJWTSecretForTests", + "accountActivationSecret": "mySecretForAccountActivation", + "passwordRecoverySecret": "mySecretForPasswordReset" } }, "geolocation": {