auth.provider API
    Preparing search index...

    Variable MIN_SECRET_ENTROPY_BYTESConst

    MIN_SECRET_ENTROPY_BYTES: 32

    Required key material for an HMAC-family secret, in bytes.

    32 bytes = 256 bits = the output width of SHA-256, which is the most a HS256 key can contribute. RFC 7518 ยง3.2 states the requirement directly: "A key of the same size as the hash output ... or larger MUST be used."