salt is needed in more places than in the creation of a Fernet key.

Author: rohe

src/idpyoidc/encrypter.py

@@ -14,7 +14,7 @@ def default_crypt_config():
         "kwargs": {
             "key": os.urandom(32),
             # "password": os.urandom(16),
-            # "salt": os.urandom(16)
+            "salt": os.urandom(16)
             # "keys": {
             #     "key_defs": [
             #         {"type": "OCT", "use": ["enc"], "kid": "password"},

src/idpyoidc/server/session/manager.py

@@ -123,10 +123,6 @@ def __init__(
 
         self.auth_req_id_map = {}
 
-    # def load_key(self):
-    #     """returns the original key assigned in init"""
-    #     return self.crypt_config["password"]
-    #
     def get_salt(self):
         """returns the original salt assigned in init"""
         return self.crypt_config["kwargs"]["salt"]

tests/test_20_config.py

@@ -96,7 +96,7 @@ def test_entity_config(filename):
 def test_init_crypto_None():
     _res = init_encrypter()
     assert _res["conf"]["class"] == DEFAULT_CRYPTO
-    assert set(_res["conf"]["kwargs"].keys()) == {"key"}
+    assert set(_res["conf"]["kwargs"].keys()) == {"key", "salt"}
     assert isinstance(_res["encrypter"], FernetEncrypter)