Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Store admin tokens in database #57

Open
lus opened this issue Jun 12, 2023 · 0 comments
Open

Store admin tokens in database #57

lus opened this issue Jun 12, 2023 · 0 comments

Comments

@lus
Copy link
Owner

lus commented Jun 12, 2023

Currently, the only possible administration token is stored in the PASTY_MODIFICATION_TOKEN_MASTER environment variable.
I think it would make sense to store Argon2id hashes in an additional admin_tokens database table instead so we can later provide an API to manage them. The current PASTY_MODIFICATION_TOKEN_MASTER value will then be used as the only superadmin token which is authorized to manage other administration tokens.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant