Comments (4)
No it's not needed! You also don't need to run the token_controller
generator.
from knock.
Do I need to have the same 'secret' on both servers?
Yes. If you want to be able to decode a token generated by your auth server, you need to share a secret signature key.
This is the default configuration with Knock (see the initializer), you can change it to be anything you want.
config.token_secret_signature_key = -> { Rails.application.secrets.secret_key_base }
I assume Knock would be running on the Auth server
Knock is conceived to act as both the API and the Auth Server. But you can also use it on both sides separately!
Here's an example of how to setup knock with Auth0 and a Rails API backend (that would be the Data API for you). In this case, Auth0 provides authentication as a service, so you don't need to care about implementing the Auth Server.
Hope this helps!
from knock.
Do you still need a User model that responds to authenticate
on the API Backend or is that only if you don't use an external authentication source? I wasn't planning on having a User database on the backend, only passing group information in the JWT to determine specific access.
from knock.
Great, thanks for your help!
from knock.
Related Issues (20)
- Support rails 6 autoload zeitwerk HOT 7
- Allow multiple token lifetimes HOT 5
- boolan params on token_payload
- Rails6: [WARNING] Could not load generator "generators/knock/install_generator". HOT 3
- Response with Bad Credencials HOT 2
- Config the entity model to a boolean param
- Rails 6 | ArgumentError (Befor authenticate_user e process_action callback :has not been defined): HOT 2
- Starting with Rails 6 | uninitialized constant Knock::Authenticable HOT 10
- Zeitwerk::NameError HOT 1
- Failing tests / CI build (uninitialized constant Knock::InstallGenerator) HOT 1
- How to override methods using Knock with Rails 6
- Crash if token_secret_signature_key returns empty string HOT 1
- Rails 5.2 heroku Jwt Knock issue
- How to use the NullUser pattern with Knock? HOT 2
- Knock not working in production / staging but just fine in develepment env? HOT 1
- Is there any proper document to integrate with Auth0 HOT 2
- Setting token lifetime according to user field
- Knock not returning token on user sign up HOT 2
- No routes generated?
- Make unmaintained state better visible? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from knock.