docs(readme): add JWT_PRIVATE_KEY + JWT_PUBLIC_KEY to Quick Start step 3
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Sonnet 4.6
parent
cc959171ba
commit
e0f2d6c71f
@@ -99,8 +99,18 @@ cp .env.example .env
|
||||
python3 -c "import secrets; print(secrets.token_hex(64))" # → SECRET_KEY
|
||||
python3 -c "import secrets; print(secrets.token_urlsafe(32))" # → CLOUD_CREDS_KEY
|
||||
|
||||
# Generate ES256 JWT keypair (required — see JWT Key Generation section below)
|
||||
python3 -c "
|
||||
from cryptography.hazmat.primitives.asymmetric import ec
|
||||
from cryptography.hazmat.primitives import serialization
|
||||
import base64
|
||||
k = ec.generate_private_key(ec.SECP256R1())
|
||||
print('JWT_PRIVATE_KEY=' + base64.b64encode(k.private_bytes(serialization.Encoding.PEM, serialization.PrivateFormat.PKCS8, serialization.NoEncryption())).decode())
|
||||
print('JWT_PUBLIC_KEY=' + base64.b64encode(k.public_key().public_bytes(serialization.Encoding.PEM, serialization.PublicFormat.SubjectPublicKeyInfo)).decode())
|
||||
" # → paste both lines into .env
|
||||
|
||||
# 4. Edit .env — at minimum set:
|
||||
# SECRET_KEY, CLOUD_CREDS_KEY, ADMIN_EMAIL, ADMIN_PASSWORD
|
||||
# SECRET_KEY, CLOUD_CREDS_KEY, JWT_PRIVATE_KEY, JWT_PUBLIC_KEY, ADMIN_EMAIL, ADMIN_PASSWORD
|
||||
# (everything else has usable defaults for local dev)
|
||||
nano .env
|
||||
|
||||
|
||||
Reference in New Issue
Block a user