vd2org opened a new issue #2947:
URL: https://github.com/apache/couchdb/issues/2947


   Broken JWT settings in *.ini file.
   
   ## Description
   
   I'm trying to config couch to accept different hmac-keys depended on their 
names but it not work as described in documentation. Only `_default` key is 
accepting and any other is ignoring.
   
   ## Steps to Reproduce
   
   Add following config options to ini-file:
   
   ```
   [jwt_keys]
   ; hmac:_default = aGVsbG8= # base64-encoded form of "hello"
   hmac:foo = aGVsbG8=
   ```
   
   Try to perform request to server with key with `sub=foo`:
   ```
   
eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJraWQiOiJobWFjIiwiaWF0IjoxNTkyMTM0OTI1LCJleHAiOjE1OTUxMzQ5MjUsInN1YiI6ImZvbyJ9.tiGzT7VfUY_oIHK-bKUER6hH5sUFoJ4VVpiwR26qTew
   ```
   Request will be rejected.
   
   ## Expected Behaviour
   
   Accepted request.
   
   ## Your Environment
   
   Official Docker image
   
   * CouchDB version used: 3.1
   * Operating system and version: Docker under Linux


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to