datalust / seq-tickets

Issues, design discussions and feature roadmap for the Seq log server
https://datalust.co/seq
98 stars 5 forks source link

Automatically create a recovery key when enabling OIDC/Entra ID authentication #2313

Open nblumhardt opened 1 week ago

nblumhardt commented 1 week ago

A recovery key is an API key with the necessary permissions to update OIDC/Entra ID configuration. Because API keys work separately from providers like OIDC/Entra ID, recovery keys can be used to fix configuration problems such as expiring client secrets.

When OIDC/Entra ID is configured for the first time, Seq should provide the option to generate a recovery key prior to completion of the configuration process. This can be used to roll back to username/password auth if the configuration attempt fails, or to recover access if the provider's client secret isn't renewed ahead of expiry.