Updating OIDC provider via CLI requires GUI manual update or gitea restart #15009

Open
opened 2025-11-02 11:27:55 -06:00 by GiteaMirror · 0 comments
Owner

Originally created by @dominikyun on GitHub (Oct 9, 2025).

Description

Steps to reproduce:

  1. Update the secret of an existing OIDC authentication source via CLI. E.g. gitea admin auth update-oauth --id 1 --secret <new_secret>
  2. Try to login with that OIDC authentication source
  3. The login will fail. Gitea still uses the old/previous client secret.

Hints:

  • It seems that only the in memory secret is not updated
  • You will see the new secret in the UI (at "Site Administration" -> "Identity & Access" -> "Authentication sources")
  • As a workaround you can press the "Update Authentication Source" in above mentioned UI, or restart Gitea. Afterwards the new secret is used.

Expected behavior:

I would expect that gitea admin auth update-oauth --id 1 --secret <new_secret> updates the in memory secret, too. And no further manual steps (like restarting Gitea) is needed.

Gitea Version

1.24.6

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

Docker image docker.gitea.com/gitea:1.24.6-rootless

Database

PostgreSQL

Originally created by @dominikyun on GitHub (Oct 9, 2025). ### Description **Steps to reproduce:** 1. Update the secret of an existing OIDC authentication source via CLI. E.g. `gitea admin auth update-oauth --id 1 --secret <new_secret>` 2. Try to login with that OIDC authentication source 3. The login will fail. Gitea still uses the old/previous client secret. **Hints:** - It seems that only the in memory secret is not updated - You will see the new secret in the UI (at "Site Administration" -> "Identity & Access" -> "Authentication sources") - As a workaround you can press the "Update Authentication Source" in above mentioned UI, or restart Gitea. Afterwards the new secret is used. **Expected behavior:** I would expect that `gitea admin auth update-oauth --id 1 --secret <new_secret>` updates the in memory secret, too. And no further manual steps (like restarting Gitea) is needed. ### Gitea Version 1.24.6 ### Can you reproduce the bug on the Gitea demo site? No ### Log Gist _No response_ ### Screenshots _No response_ ### Git Version _No response_ ### Operating System _No response_ ### How are you running Gitea? Docker image docker.gitea.com/gitea:1.24.6-rootless ### Database PostgreSQL
GiteaMirror added the type/bug label 2025-11-02 11:27:55 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#15009