From 8691920ba5929745def1c6594e0633cebe661d26 Mon Sep 17 00:00:00 2001 From: Waldir Montoya Date: Thu, 3 Aug 2023 12:37:55 -0500 Subject: [PATCH 1/3] Describe what is a session secret Signed-off-by: Waldir Montoya --- docs/auth/auth0/provider.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/auth/auth0/provider.md b/docs/auth/auth0/provider.md index e9393cfa0b..dabc5fa3c1 100644 --- a/docs/auth/auth0/provider.md +++ b/docs/auth/auth0/provider.md @@ -47,6 +47,7 @@ The Auth0 provider is a structure with three configuration keys: - `clientSecret`: The Application client secret, found on the Auth0 Application page - `domain`: The Application domain, found on the Auth0 Application page +- `sessionsecret`: The session secret is a key used for signing and/or encrypting cookies set by the application to maintain session state. In this case, 'your session secret' should be replaced with a long, complex, and unique string that only your application knows. Because Auth0 requires a session you need to give the session a secret key. From fc13158927622b7d15b330c253575f8da4df4b3b Mon Sep 17 00:00:00 2001 From: Waldir Montoya <35240971+waldirmontoya25@users.noreply.github.com> Date: Thu, 3 Aug 2023 12:55:30 -0500 Subject: [PATCH 2/3] Update docs/auth/auth0/provider.md Co-authored-by: Jamie Klassen Signed-off-by: Waldir Montoya <35240971+waldirmontoya25@users.noreply.github.com> --- docs/auth/auth0/provider.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/auth/auth0/provider.md b/docs/auth/auth0/provider.md index dabc5fa3c1..68d55ca0e3 100644 --- a/docs/auth/auth0/provider.md +++ b/docs/auth/auth0/provider.md @@ -47,7 +47,7 @@ The Auth0 provider is a structure with three configuration keys: - `clientSecret`: The Application client secret, found on the Auth0 Application page - `domain`: The Application domain, found on the Auth0 Application page -- `sessionsecret`: The session secret is a key used for signing and/or encrypting cookies set by the application to maintain session state. In this case, 'your session secret' should be replaced with a long, complex, and unique string that only your application knows. +- `session.secret`: The session secret is a key used for signing and/or encrypting cookies set by the application to maintain session state. In this case, 'your session secret' should be replaced with a long, complex, and unique string that only your application knows. Because Auth0 requires a session you need to give the session a secret key. From f626d1d85e784a0f45d31448b2d91b770e742c04 Mon Sep 17 00:00:00 2001 From: Waldir Montoya Date: Thu, 3 Aug 2023 14:32:43 -0500 Subject: [PATCH 3/3] tweak session secret description given feedback Signed-off-by: Waldir Montoya --- docs/auth/auth0/provider.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/docs/auth/auth0/provider.md b/docs/auth/auth0/provider.md index 68d55ca0e3..dcd02d226f 100644 --- a/docs/auth/auth0/provider.md +++ b/docs/auth/auth0/provider.md @@ -41,15 +41,18 @@ auth: secret: ${AUTH_SESSION_SECRET} ``` -The Auth0 provider is a structure with three configuration keys: +The Auth0 provider is a structure with these configuration keys: - `clientId`: The Application client ID, found on the Auth0 Application page - `clientSecret`: The Application client secret, found on the Auth0 Application page - `domain`: The Application domain, found on the Auth0 Application page + +It additionally relies on the following configuration to function: + - `session.secret`: The session secret is a key used for signing and/or encrypting cookies set by the application to maintain session state. In this case, 'your session secret' should be replaced with a long, complex, and unique string that only your application knows. -Because Auth0 requires a session you need to give the session a secret key. +Auth0 requires a session, so you need to give the session a secret key. ## Optional Configuration