openstack
/
keystone-specs
Code Issues Proposed changes

Merge "Add a note about crypto-agility with JWT"

This commit is contained in:
Zuul 2018-12-11 19:10:07 +00:00 committed by Gerrit Code Review
parent 7f6789e4e6 fd0b5e6a5a
commit c197cff662
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
specs/keystone/stein/json-web-tokens.rst
View File

@ -212,6 +212,9 @@ validating multiple blessed algorithms, allowing multiple tokens signed with
different algorithms to be validated without require configuration changes
except on the signing node.
For the time being, if a deployment is using JWTs and needs to exercise
crypto-agility, it is recommended they convert to Fernet tokens.
Alternatives
------------