diff --git a/.vscode/launch.example.json b/.vscode/launch.example.json index b2c481f..b1b20ea 100644 --- a/.vscode/launch.example.json +++ b/.vscode/launch.example.json @@ -18,14 +18,28 @@ "args": [], "cwd": "${workspaceFolder}", "env": { + "ADMIN_DIDS": "", + "AIP_CLIENT_ID": "PLACEHOLDER", + "AIP_CLIENT_SECRET": "PLACEHOLDER", + "AIP_HOSTNAME": "auth.smokesignal.events", + "CONTENT_STORAGE": "/path/to/content/storage/", + "DATABASE_URL": "postgresql://smokesignal:smokesignal_dev_password@localhost:5436/smokesignal_dev", "DEBUG": "true", + "DESTINATION_KEY": "did:key:z42tzxqTPLACEHOLDER", + "ENABLE_OPENSEARCH": "false", + "ENABLE_TASK_OAUTH_REQUESTS_CLEANUP": "false", + "ENABLE_TASK_OPENSEARCH": "false", + "ENABLE_TASK_WEBHOOKS": "false", + "ENABLE_WEBHOOKS": "false", + "EXTERNAL_BASE": "smokesignal.tunn.dev", + "HTTP_COOKIE_KEY": "PLACEHOLDER", "HTTP_PORT": "3100", - "EXTERNAL_BASE": "yourhostname", - "HTTP_COOKIE_KEY": "7omSYPNPwxT2gZPf0sQ51kPhaWKAqBu22M0j2il81LyIWP79jR4lrS1rBRX5ZIQS9qxATh469XL0k4G8c67r+A", - "OAUTH_ACTIVE_KEYS": "01JV8430MGTTA692WBYFGRMWRG", - "DESTINATION_KEY": "01JV8430MGTTA692WBYFGRMWRG", - "SIGNING_KEYS": "eyJrZXlzIjpbeyJraWQiOiIwMUpWODQzME1HVFRBNjkyV0JZRkdSTVdSRyIsImFsZyI6IkVTMjU2Iiwia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiJYb3dFbHpXMFhTeXVXUWJOaVFpTDFmbm9RQlhZRmkwWk9BQ2U3S3JONU1jIiwieSI6IkFXLWpFNWYtcXNZYVBoRFhCUUNuNjVCaVRKRWtJRVEzYXFONXV2b1U1TkkiLCJkIjoiNXNvT2RZWko2MzVoWnJWMmlRcFgya1dPR19wdFB0eHJVN1J4eFFaUTNJSSJ9XX0K", - "RUST_LOG": "smokesignal=debug,html5ever=info,info" + "OAUTH_BACKEND": "pds", + "OPENSEARCH_ENDPOINT": "https://your.opensearch.endpoint.local", + "RUST_BACKTRACE": "1", + "RUST_LOG": "smokesignal=debug,html5ever=info,info", + "SERVICE_KEY": "did:key:z42tikyfPLACEHOLDER", + "SIGNING_KEYS": "did:key:z42tj1piPLACEHOLDER" } } ] diff --git a/README.md b/README.md index a41c39b..c713ae7 100644 --- a/README.md +++ b/README.md @@ -96,7 +96,7 @@ CONTENT_STORAGE=s3://bucket-name/prefix?region=us-east-1 #### For PDS OAuth (default): ```bash OAUTH_BACKEND=pds -SIGNING_KEYS=/path/to/keys.json +SIGNING_KEYS=did:key:foobarbaz ``` #### For AIP OAuth: @@ -134,19 +134,15 @@ Use the included crypto utility to generate required keys: ```bash # Generate HTTP cookie key -cargo run --bin crypto -- key +$ cargo run --bin crypto -- key -# Generate JWK for OAuth signing -cargo run --bin crypto -- jwk -``` +# Generate a private key OAuth signing +$ goat key generate -t p256 +Key Type: P-256 / secp256r1 / ES256 private key +Secret Key (Multibase Syntax): save this securely (eg, add to password manager) + z42tmsxs... -Create a `keys.json` file with your JWKs: -```json -{ - "keys": [ - { "kid": "01J7PM272ZF0DYZAPR3499VBTM", ... } - ] -} +export SIGNING_KEYS=did:key:z42tmsxs... ``` ## Running the Application