Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generate JWTs on Dappmanager #2009

Open
dappnodedev opened this issue Aug 7, 2024 · 0 comments
Open

Generate JWTs on Dappmanager #2009

dappnodedev opened this issue Aug 7, 2024 · 0 comments

Comments

@dappnodedev
Copy link
Contributor

dappnodedev commented Aug 7, 2024

Instead of hardcoding the JWT secrets in each of the clients, we could make the dappmanager responsible for their generation and distribution. The process is defined below:

  1. On start, dappmanager generates a random JWT per network and stores them

  2. There must be an allow list that defines which services have access to each secret. This could be inferred from the list of clients to be shown in the stakers

3A. The Dappmanager will expose an API endpoint that will return the secret in case that the request source is one of the allowed ones

3B. The Dappmanager will inject the value of that secret into the compose file of any client included in the allow list at installation time

  1. A function must be defined in the https://github.com/dappnode/staker-package-scripts repo so that the clients can use the JWT
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant