Passport signs OAuth tokens with keys that were only ever generated by a local install:api run and are gitignored. Generate them in CI (tests + browser jobs), on production boot (docker entrypoint, unless provided via PASSPORT_* env), and in worktree.sh, and document the PASSPORT_* env in .env.example. Without this the token endpoint fails in CI and production. |
||
|---|---|---|
| .. | ||
| ci.yml | ||
| release.yml | ||