From 96e43aaf45469998cfa65f097b099fbac5042b14 Mon Sep 17 00:00:00 2001 From: Andrew Morgan Date: Tue, 25 Jun 2019 10:37:45 +0100 Subject: [PATCH] Define what characters lookup_pepper can consist of --- proposals/2134-identity-hash-lookup.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/proposals/2134-identity-hash-lookup.md b/proposals/2134-identity-hash-lookup.md index b9a53cb06..34e9b0a6a 100644 --- a/proposals/2134-identity-hash-lookup.md +++ b/proposals/2134-identity-hash-lookup.md @@ -56,7 +56,8 @@ algorithms and pepper as a JSON object: ``` The name `lookup_pepper` was chosen in order to account for pepper values being -returned for other endpoints in the future. +returned for other endpoints in the future. The contents of `lookup_pepper` +MUST match the regular expression `[a-zA-Z0-9]*`. Clients should request this endpoint each time before making a `/lookup` or `/bulk_lookup` request, to handle identity servers which may rotate their