Skip to content

Configure client secret securely from environment variable or file #1307

@vitSkalicky

Description

@vitSkalicky

How to use GitHub

  • Please use the 👍 reaction to show that you are interested into the same feature.
  • Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
  • Subscribe to receive notifications on status change and new comments.

Feature request

Which Nextcloud Version are you currently using: 32.0.3

Is your feature request related to a problem? Please describe.
It is not possible to configure the OIDC client secret without exposing it to all users of the system. (program arguments are exposed in plaintaxt to all other processes on Linux)

Describe the solution you'd like
Add option to read client secret from an environment variable or file.

Describe alternatives you've considered
--clientsecret-file=PATH_TO_FILE_WITH_CLIENTSECRET or --clientsecret-env=CLIENTSECRET_ENV_VARIABLE_NAME

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions