w3c-ccg / vc-test-suite-implementations

Implementations for VC HTTP API tests

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Don't conflate oauth client secrets with zcap key seeds

aljones15 opened this issue · comments

Zcap key seeds should use their own naming convention and not re-use the CLIENT_SECRET_VENDOR_NAME pattern.

Also please make sure env variables are marked so no one accidentally commits oauth or zcap secrets to this repo.

Add a section to the README that explains how to set organization wide CLIENT_SECRETS

I believe we want to use the format KEY_SEED_VENDOR for the zcap key seed material.

closing as this has been addressed.