OidcStateEncryptionKey

Symmetric key material used to encrypt the temporary OAuth state cookie.

The key protects the in-flight OAuth state between the login redirect and the callback, including the OIDC state, nonce, and PKCE code verifier. Configure the same key on every node in a cluster. Use rotating to accept cookies encrypted by the previous key while new cookies are encrypted by the current key.

Report a problem

Types

Link copied to clipboard
object Companion