Hash OAuth application secrets
What does this MR do and why?
Follow up from #364110 (closed) to hash oauth application secrets. This MR is also depends on gitlab-org/build/CNG!1116 (merged) and omnibus-gitlab!6310 (merged) to prepare infrastructure dependencies
Screenshots or screen recordings
How to set up and validate locally
Numbered steps to set up and validate the change are strongly suggested.
- In rails console enable the experiment fully
Feature.enable(:hash_oauth_secrets)
- Visit Oauth applications page as
http://127.0.0.1:3000/admin/applications
- Click the
New application
button. - Fill name, redirect_ui and scopes field
- Click 'Save application button'
- Check if the new application created allows copying secrets for the first time
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.
Related to #370871 (closed)
Edited by Aboobacker MK