Commit Graph
4 Commits
Author SHA1 Message Date
André Duffeck 10b93edded Derive the guest session key from OC_JWT_SECRET
Replace AUTH_GUEST_SESSION_JWT_SECRET with a key derived via
HMAC-SHA256 from the reva JWT secret. Guest session tokens and reva
access tokens remain unforgeable across each other without a second
secret to configure.
2026-10-07 08:46:53 +02:00
André Duffeck adc8a51657 Don't use the same secret for signing sessions and reva tokens 2026-10-06 09:52:02 +02:00
Ralf Haferkamp 246d49ee18 guestlinks: Setup guestlinks authprovider
This starts the guestlinks authprovider as part of the auth-guest
service and wires it into the authregistry.
2026-10-06 09:47:00 +02:00
Alex Ababii cbf3ee8c0b feat(guestauth): guestauth service rename to auth-guest 2026-10-06 08:07:44 +02:00