Re:Run your own OAuth2 server
by tscs37 on Monday September 04, 2017 @11:03AM
(#15168691)
I solved this for my objects in two ways.
1) admin accounts are generated on startup with random passwords. These are printed on the console on the first startup only.
2) in a configuration format I use, there is a special keyword for using a random string as a value which is different each time the config is parsed.
I think any secure value should be either generated for you or random on each startup unless specified otherwise. It would greatly improve the security of some projects out there.
1) admin accounts are generated on startup with random passwords. These are printed on the console on the first startup only.
2) in a configuration format I use, there is a special keyword for using a random string as a value which is different each time the config is parsed.
I think any secure value should be either generated for you or random on each startup unless specified otherwise. It would greatly improve the security of some projects out there.