From ce314e6fe236c7a41535dd8a9a0f097c74c6f1ce Mon Sep 17 00:00:00 2001
From: Mark Felder <feld@FreeBSD.org>
Date: Tue, 14 Jul 2020 11:24:58 -0500
Subject: [PATCH] Clarify description and suggestion
---
config/description.exs | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/config/description.exs b/config/description.exs
index 8ec4b712f..2b41e7dac 100644
--- a/config/description.exs
+++ b/config/description.exs
@@ -2008,14 +2008,14 @@ config :pleroma, :config_description, [
label: "Pleroma Admin Token",
type: :group,
description:
- "Allows to set a token that can be used to authenticate with the admin api without using an actual user by giving it as the `admin_token` parameter (risky; use HTTP Basic Auth or OAuth-based authentication if possible)",
+ "Allows setting a token that can be used to authenticate requests with admin privileges without a normal user account token. Append the `admin_token` parameter to requests to utilize it. (Please reconsider using HTTP Basic Auth or OAuth-based authentication if possible)",
children: [
%{
key: :admin_token,
type: :string,
description: "Admin token",
suggestions: [
- "We recommend NOT setting the value do to increased security risk; if set, use a secure random long string or UUID (and change it as often as possible)"
+ "Please use a high entropy string or UUID"
]
}
]