what is this SOCIAL_AUTH_EDX_OIDC_ID_TOKEN_DECRYPTION_KEY

[Ranvijay Sachan]

http://gitlab.cse.iitb.ac.in/cypressedx/edx-analytics-dashboard/blob/ef727f3270b926c17c24d1c416fa632d8f3b6b0b/analytics_dashboard/analytics_dashboard/settings/base.py

can someone describe why we need (# This value should be the same as SOCIAL_AUTH_EDX_OIDC_SECRET
SOCIAL_AUTH_EDX_OIDC_ID_TOKEN_DECRYPTION_KEY = None) in edx-analytics-dashboard settings.

============================================================================
IMPORTANT NOTICE: The information in this e-mail and any attached files is CONFIDENTIAL and may be legally privileged or prohibited from disclosure and unauthorised use. The views of the author may not necessarily reflect those of Zymr, Inc. It is intended solely for the addressee, or the employee or agent responsible for delivering such materials to the addressee. If you have received this message in error please return it to the sender then delete the email and destroy any copies of it. If you are not the intended recipient, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication, or any action taken or omitted to be taken in reliance upon this message or its attachments is prohibited and may be unlawful. At present the integrity of e-mail across the Internet cannot be guaranteed and messages sent via this medium are potentially at risk. All liability is excluded to the extent permitted by law for any claims arising as a result of the use of this medium to transmit information by or to Zymr, Inc.

[Clinton Blackburn]

That value represents the decryption key used to verify OpenID Connect responses. We use OpenID Connect (which builds on OAuth 2.0) to handle single sign-on. I cannot find documentation for Analytics Dashboard; but, the docs for the E-Commerce Service (http://edx.readthedocs.io/projects/edx-installing-configuring-and-running/en/latest/ecommerce/install_ecommerce.html?highlight=SOCIAL_AUTH_EDX_OIDC_ID_TOKEN_DECRYPTION_KEY#configure-a-site-partner-and-site-configuration) should provide the relevant context.