New oauth2.JWT_SECRET is missing from gitea generate secret #3274

Closed
opened 2025-11-02 05:06:17 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @segevfiner on GitHub (Apr 30, 2019).

  • Gitea version (or commit ref): v1.8.0
  • Git version: 2.20.1
  • Operating system: Alpine 3.9.3
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

There is a new secret in the Gitea config since 1.8.0 (I think) named oauth2.JWT_SECRET but there is no command to per-generate it under gitea generate secret. That is, there is no gitea generate secret JWT_SECRET.

Originally created by @segevfiner on GitHub (Apr 30, 2019). <!-- NOTE: If your issue is a security concern, please send an email to security@gitea.io instead of opening a public issue --> <!-- 1. Please speak English, this is the language all maintainers can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/gitea) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): v1.8.0 - Git version: 2.20.1 - Operating system: Alpine 3.9.3 - Database (use `[x]`): - [ ] PostgreSQL - [ ] MySQL - [ ] MSSQL - [x] SQLite - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [x] Not relevant - Log gist: ## Description There is a new secret in the Gitea config since 1.8.0 (I think) named `oauth2.JWT_SECRET` but there is no command to per-generate it under `gitea generate secret`. That is, there is no `gitea generate secret JWT_SECRET`.
GiteaMirror added the type/enhancement label 2025-11-02 05:06:17 -06:00
Author
Owner

@techknowlogick commented on GitHub (Apr 30, 2019):

LFS_JWT_SECRET can be used for oauth as well, but I'm going to keep this ticket open to update the command to be just JWT_SECRET.

@techknowlogick commented on GitHub (Apr 30, 2019): `LFS_JWT_SECRET` can be used for oauth as well, but I'm going to keep this ticket open to update the command to be just `JWT_SECRET`.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#3274