Bug #21856
closedSalt keys missing from Reclaim server
0%
Description
While working on the new multisite SSO approach in https://redmine.gc.cuny.edu/issues/21797#note-27 , I noticed that we do not have WP salt keys defined in cac-env-config.php
.
Let's add some randomized salts from https://api.wordpress.org/secret-key/1.1/salt/, however when we do, all current login sessions will be invalidated. So this should be done when there is less activity on the site. Once we've added the salts, we can test the new multisite SSO approach as well.
Updated by Boone Gorges 16 days ago
Sounds good, Ray. I'll leave this to you to implement. (I believe WP generates salts and keeps them in the database when none are found in the config, but putting them in cac-env-config.php is definitely a better solution.)
Updated by Raymond Hoh 12 days ago
- Status changed from New to Resolved
Forgot to close this one during multisite SSO testing.