add final service key config
This commit is contained in:
parent
c6b8b3ce8c
commit
d277fe6741
2 changed files with 3 additions and 1 deletions
|
@ -304,3 +304,4 @@ class DefaultConfig(object):
|
||||||
|
|
||||||
# The timeout for service key approval.
|
# The timeout for service key approval.
|
||||||
UNAPPROVED_SERVICE_KEY_TTL_SEC = 60 * 60 * 24 # One day
|
UNAPPROVED_SERVICE_KEY_TTL_SEC = 60 * 60 * 24 # One day
|
||||||
|
KEY_SERVER_AUDIENCE_NAME = 'quay'
|
||||||
|
|
|
@ -9,13 +9,14 @@ from cryptography.hazmat.backends import default_backend
|
||||||
import data.model
|
import data.model
|
||||||
import data.model.service_keys
|
import data.model.service_keys
|
||||||
|
|
||||||
|
from app import app
|
||||||
from util.security import strictjwt
|
from util.security import strictjwt
|
||||||
|
|
||||||
|
|
||||||
key_server = Blueprint('key_server', __name__)
|
key_server = Blueprint('key_server', __name__)
|
||||||
|
|
||||||
JWT_HEADER_NAME = 'Authorization'
|
JWT_HEADER_NAME = 'Authorization'
|
||||||
JWT_AUDIENCE = 'quay'
|
JWT_AUDIENCE = app.config['KEY_SERVER_AUDIENCE_NAME']
|
||||||
|
|
||||||
|
|
||||||
def _validate_jwk(jwk, kid):
|
def _validate_jwk(jwk, kid):
|
||||||
|
|
Reference in a new issue