src-advisory/SRCmail
3
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat: add sessionSecretFile and oauthClientSecretFile for JSON config

Browse Source
This commit is contained in:
Pascal Dietrich
2026-05-31 00:14:38 +02:00
committed by Linus Rath
parent 7ee329e046
commit b508551d02
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/auth/session-secret.ts
+6 -1
View File
@@ -23,7 +23,12 @@ export function getSessionSecret(): string {
if (fromFile) return fromFile; if (fromFile) return fromFile;
const fromAdmin = configManager.get<string>('sessionSecret', ''); const fromAdmin = configManager.get<string>('sessionSecret', '');
return fromAdmin || ''; if (fromAdmin) return fromAdmin;
const fromAdminFile = readFileEnv(
configManager.get<string>('sessionSecretFile', ''),
);
return fromAdminFile || "";
} }
export function hasSessionSecret(): boolean { export function hasSessionSecret(): boolean {
lib/oauth/token-exchange.ts
+6
View File
@@ -19,6 +19,12 @@ export function getDiscoveryValidator(): EndpointValidator | undefined {
function getGlobalClientSecret(): string { function getGlobalClientSecret(): string {
const adminSecret = configManager.get<string>('oauthClientSecret', ''); const adminSecret = configManager.get<string>('oauthClientSecret', '');
if (adminSecret) return adminSecret; if (adminSecret) return adminSecret;
const adminFileSecret = readFileEnv(
configManager.get<string>('oauthClientSecretFile', ''),
);
if (adminFileSecret) return adminFileSecret;
return process.env.OAUTH_CLIENT_SECRET || readFileEnv(process.env.OAUTH_CLIENT_SECRET_FILE) || ''; return process.env.OAUTH_CLIENT_SECRET || readFileEnv(process.env.OAUTH_CLIENT_SECRET_FILE) || '';
} }