require JWT keys to be exactly 32 bytes

[tersec]

Many lines had trailing whitespace and inconsistent capitalization of acronyms.

[djrtwo]

lgtm. thanks!

[lightclient]

Seems to be unhappy that "CLs" isn't a word. Do you mind adding it to the word list?

[mkalinin]

LGTM 👍

[rauljordan]

Hi @tersec and @mkalinin just want to bring up this issue from @prestonvanloon here #208. We don't understand why we need JWT secrets as strictly-formatted hex strings in the spec, when plaintext passwords could be used for a cleaner UX

[mkalinin]

Hi @tersec and @mkalinin just want to bring up this issue from @prestonvanloon here #208. We don't understand why we need JWT secrets as strictly-formatted hex strings in the spec, when plaintext passwords could be used for a cleaner UX

I don't think that issue is relevant to this PR. This PR is about making the length requirement consistent across the spec, it doesn't attempt to change requirements on the length of the secret.

Let's take this discussion into the issue (I have commented on it).