zeroflag opened a new pull request #473:
URL: https://github.com/apache/knox/pull/473
## What changes were proposed in this pull request?
The patch makes possible to use an alias in pac4j provider config so that
`oidc.secret` is no longer need to be hardcoded in the topology as plain text.
## How was this patch tested?
Added an alias for oidc.secret in knoxsso.xml.
```
<param>
<name>oidc.secret</name>
<value>${ALIAS=myOidcSecret}</value>
</param>
```
Created the alias with knoxcli.
```bash
$ bin/knoxcli.sh create-alias myOidcSecret --value <my-secret> --cluster
knoxsso
````
Tested authentication with auth0.com.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@knox.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
