fedora-infrastructure

#8830 Odd oidc secret
Closed: Fixed by pingou. Opened by pingou.

Closed: Fixed
Reopen Issue

When working on https://pagure.io/fedora-infrastructure/issue/8035 I ran to files/ipsilon/openidc.staging.static and files/ipsilon/openidc.production.static in which for kerneltest as well as python-fedora they set the oidc_secret to be notsecret.

This seems like a placeholder that did not get replaced, is that the case or is this actually the desired value?

@puiterwijk discussing with @kevin on IRC he said you may be able to help us about this.

Metadata Update from @kevin:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

So, those are Application Clients, so clients that run on people's own computers.
Those cannot be expected to keep secrets, since they can always just look at the source code.
OpenID Connect has a special mode of operation for those, set by application_type="native".
So this is as expected.

Metadata Update from @puiterwijk:
- Issue private status set to: False (was: True)

Ok thanks for the confirmation and the explanation!

Metadata Update from @pingou:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.