Lenin Alevski c48a024310 Remove user secret key from encrypted session token (#652) ...

User secret key is not really need it to be stored inside the encrypted
session key, since the `change-password` endpoint requires the user to
provide the current `secret key` that password will be used to
initialize a new minio client then we will leverage on the
`SetUser` operation, this api only works with actual user credentials
and not sts credentials

2021-03-18 10:27:27 -07:00

5.3 KiB

Raw Blame History

View Raw