Treat JWT as a Secret, not String

This commit is contained in:
Joe Nelson
2015-11-19 09:58:41 -08:00
parent 2c3a52fc35
commit 87c946ef52
5 changed files with 12 additions and 9 deletions
+1 -1
View File
@@ -184,7 +184,7 @@ app dbStructure conf reqBody req =
hasPrefer val = any (\(h,v) -> h == "Prefer" && v == val) hdrs
accept = lookupHeader hAccept
schema = cs $ configSchema conf
jwtSecret = (cs $ configJwtSecret conf) :: Text
jwtSecret = configJwtSecret conf
range = rangeRequested hdrs
allOrigins = ("Access-Control-Allow-Origin", "*") :: Header
contentType = fromMaybe "application/json" $ contentTypeForAccept accept