X Tutup
Skip to content

Commit 213f4a5

Browse files
urandom2mislav
authored andcommitted
context: use the real oauth credentials
It is trivial to extract this information from the released artefacts, thus there is no security benefit to the safe/development credentials. This approach also prevents users from using go-get to install. As proof of concept, and to enable go-get, this change embeds the GitHub CLI credentials, instead of GitHub CLI (dev).
1 parent 48ffd5a commit 213f4a5

File tree

1 file changed

+2
-4
lines changed

1 file changed

+2
-4
lines changed

context/config_setup.go

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,10 +18,8 @@ const (
1818
)
1919

2020
var (
21-
// The GitHub app that is meant for development
22-
oauthClientID = "4d747ba5675d5d66553f"
23-
// This value is safe to be embedded in version control
24-
oauthClientSecret = "d4fee7b3f9c2ef4284a5ca7be0ee200cf15b6f8d"
21+
oauthClientID = "178c6fc778ccc68e1d6a"
22+
oauthClientSecret = "34ddeff2b558a23d38fba8a6de74f086ede1cc0b"
2523
)
2624

2725
// TODO: have a conversation about whether this belongs in the "context" package

0 commit comments

Comments
 (0)
X Tutup