mirror of
https://github.com/suitenumerique/docs.git
synced 2026-09-23 10:05:10 +02:00
Manuel RaynaudandAnthony LC
854a6693bc
Thw private key needed to generate a jwt token will be mandatory. In order to ease the development we want to automate its generation
24 lines
755 B
Bash
Executable File
24 lines
755 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Generate the RSA private key signing the JWT tokens issued by the backend.
|
|
#
|
|
# Development only. The key is generated locally and never committed: it lands
|
|
# in "data/", which is gitignored. The dev stack mounts it in the backend
|
|
# containers, where JWT_PRIVATE_KEY_FILE points at it.
|
|
#
|
|
# Idempotent: an existing key is kept. Delete the file to roll the key.
|
|
|
|
set -eo pipefail
|
|
|
|
REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
KEY_PATH="${REPO_DIR}/data/jwt/private.pem"
|
|
|
|
if [ -f "${KEY_PATH}" ]; then
|
|
exit 0
|
|
fi
|
|
|
|
mkdir -p "$(dirname "${KEY_PATH}")"
|
|
openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out "${KEY_PATH}" 2>/dev/null
|
|
chmod 600 "${KEY_PATH}"
|
|
echo "✓ JWT private key generated in ${KEY_PATH}"
|