Skip to content

Commit dde274b

Browse files
committed
Added instructions on how to generate key pair for JWT authentication
1 parent c84c579 commit dde274b

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

docs/infrastructure_and_maintenance/security/development_security.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -145,3 +145,18 @@ security:
145145
entry_point: lexik_jwt_authentication.jwt_token_authenticator
146146
stateless: true
147147
```
148+
149+
In order for the application to be able to generate JWT tokens, a [PEM encoded keyset needs to be generated](https://symfony.com/bundles/LexikJWTAuthenticationBundle/current/index.html#generate-the-ssl-keys) using the command:
150+
151+
```bash
152+
php bin/console lexik:jwt:generate-keypair
153+
```
154+
155+
The generated key pair will be stored in `config/jwt`
156+
157+
!!! note "[[= product_name_cloud =]]"
158+
159+
In order to be able to store generate and store the tokens on [[= product_name_cloud =]], you must define `config/jwt`
160+
as a volume in `.platform.app.yaml`. If you have a 3-node-cluster setup, you must ensure the key pair is the same on all
161+
3 servers. Either use a network share for this, or use local mount manually copy the same keu pair
162+
to all servers

0 commit comments

Comments
 (0)