kolaenteandkolaente a59872be2f fix(config): apply deprecated service.jwtsecret to service.secret ...

service.secret had an unconditional random default, and viper's IsSet
reports defaults as set. The deprecation branch therefore always took the
"both keys are set" path and never copied service.jwtsecret over, so
instances configured with the old key silently got a fresh random secret
on every start — flaky 401s across replicas.

The random fallback is now generated after the config file and env are
read, so an empty service.secret unambiguously means "not configured".

2026-07-26 15:59:40 +00:00

..

config_test.go

fix(config): apply deprecated service.jwtsecret to service.secret

2026-07-26 15:59:40 +00:00

config.go

fix(config): apply deprecated service.jwtsecret to service.secret

2026-07-26 15:59:40 +00:00