Skip to content
This repository was archived by the owner on Mar 13, 2025. It is now read-only.

Fix security issue by adding JWT validation #137

Merged
merged 1 commit into from
May 9, 2019
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions configuration.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,9 @@ The following config parameters are supported, they are defined in `src/config.j
|COPILOT_ROLE| The role to identify copilot|'copilot'|
|HELP_LINK| The link for help| 'https://github.com/topcoder-platform/topcoder-x-ui/wiki'|
|ADMINISTRATOR_ROLES| The array of roles to be considered as admin| `['administrator', 'admin']`|
|TOPCODER_AUTH_SECRET| The auth secret used to sign the JWT| No default - needs to be set up|
|TOPCODER_VALID_ISSUERS| Stringified array of valid JWT issuers| `'["topcoder-dev.com"]'`|
|TOPCODER_JWT_KEY_CACHE_TIME| They JWT cache time | 90 |

## GitHub OAuth App Setup

Expand Down
Loading