Skip to main content

types.BootstrapTokensConfig

types.BootstrapTokensConfig API schema defining 1 field, including hmac secret.

hmac_secretstring

HMACSecret is the server-side key for HMAC-SHA256 hashing of bootstrap tokens. Required to enable the verifier + admin endpoints. Recommended length: at least 32 bytes of entropy. Today read directly as a string from config (matching the cloud's env-var-injected approach); a future enhancement could load from a separate secret store.

types.BootstrapTokensConfig
{
  "hmac_secret": "string"
}