Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-20757

%secret% key should be generated at install/update

    Details

      Description

      Currently we have in parameters.yml:

      parameters:
          secret: ThisTokenIsNotSoSecretChangeIt
      

      This is not secure at all and should be changed at install/update time.

      Can be done at the step where legacy settings are dumped into YAML and with a composer install/update command like it's done in Symfony standard.

        Issue Links

          Activity

          Hide
          Jérôme Vieilledent (Inactive) added a comment -

          We might take advantage of SensioDistributionBundle

          Show
          Jérôme Vieilledent (Inactive) added a comment - We might take advantage of SensioDistributionBundle
          Show
          Jérôme Vieilledent (Inactive) added a comment - Pull-requests: ezpublish-kernel: https://github.com/ezsystems/ezpublish-kernel/pull/329 ezpublish-community: https://github.com/ezsystems/ezpublish-community/pull/50
          Show
          Jérôme Vieilledent (Inactive) added a comment - Fixed in : ezpublish-kernel: https://github.com/ezsystems/ezpublish-kernel/commit/33a70a8dbc56fbdbf82b34a14a7634e09f32ebe6 ezpublish-community: https://github.com/ezsystems/ezpublish-community/compare/49b2d00b...deadf896
          Hide
          Marcos Loureiro (Inactive) added a comment -

          QA Approved

          Show
          Marcos Loureiro (Inactive) added a comment - QA Approved

            People

            • Assignee:
              Unassigned
              Reporter:
              Jérôme Vieilledent (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 day, 3 hours, 30 minutes
                1d 3h 30m