Tips about NSS

I have been experimenting with NSS for use with the Data Kitchen project and I'm going to use this space to record some notes which may be of use to NSS system admins and also those self hosting NSS. If this belongs somewhere else, please just move it or suggest a better place to post it.

Directly examining/editing user accounts

Look in the folder where your config.json points the database (by default .db). There should be files in .db/oidc/users/*.json. There is one file per user which should contain plain text of the their username, email and other account info as well as a hash of their password.

Using the Cors Proxy

In config.json, set cors-proxy to a URI in your document root e.g. /proxy

You can now use https://yourNSS/proxy?uri=https://example.com/foo (note : the URI should be URL-encoded). This can be used directly in a client even if going to https://example.com/foo without the proxy is forbidden by Cors rules. This lets your request to https://example.com.foo be sent by the server rather than directly sent from the client.

Überprüfe die Hinweise zu config.json, .db/oidc/users/*.json und der cors-proxy-Einstellung. Identifiziere den geeigneten Dokumentationsort im Repository und veröffentliche dort die Hinweise zur NSS-Administration und zum Self-Hosting, wobei die Beispiele erhalten bleiben und die Hinweise zu URL-encoding klar formuliert sind.