Where should the Casdoor client secret go?

arjun_p · 15h

conf/app.conf is in git, and I don't want our clientSecret in our fork. What's the intended place for secrets?

casnode_team · 15h

conf/app.local.conf: same format as conf/app.conf, ignored by git, and every item in it overrides app.conf. Pulling a new version never conflicts with it.

Every item can also be set as an environment variable of the same name (clientSecret=...), which is what the Docker example does.

Topic	Replies	Views	Activity
Changing the logo, colors and the homepage banner Configuration branding	2	8	15h
Behind Nginx every visitor shows up as 127.0.0.1 Configuration nginx deployment	1	6	15h
Switching from SQLite to PostgreSQL Configuration postgresql database	2	9	15h
Composer tricks: quotes, collapsible sections, code and emoji Sandbox tips	1	10	15h
An importer for an existing Discourse forum Feature Requests import discourse	1	9	15h

Where should the Casdoor client secret go?

Join the conversation

Suggested Topics