Patrick Uiterwijk

Signed-off-by: Patrick Uiterwijk

Please note that this IS valid according to RFC2616, section 10.1: A client MUST be prepared to accept one or more 1xx status responses prior to a regular response, even...

[secaudit-blocking] No installation documentation

23

Part of secaudit #316, blocking. The [Installation documentation](https://github.com/fedora-infra/noggin/blob/0e3be29de02a1ba7aaf247493c5adf7d08e5f64b/docs/installation.rst) is absent, and doesn't contain any useful information in how to set up a production-grade setup of noggin.

Allow Shamir with a threshold of 1

1

This requirement for a threshold of at least 2 is not technically required.

Allow shamir_threshold: 1

3

This allows the case where multiple keygroups are used, but any one of the groups needs to be able to decrypt the secret. This is for example useful if some...

Add OpenID Connect Token authenticator

1

Signed-off-by: Patrick Uiterwijk