equinor / webviz

Mozilla Public License 2.0
6 stars 9 forks source link

Consolidate app secrets #697

Open anders-kiaer opened 3 months ago

anders-kiaer commented 3 months ago

Currently there is an application registration secret given to Radix called "Client Secret" (in Radix) which Radix uses to access key vault. There is also an application registration secret in key vault called WEBVIZ-CLIENT-SECRET.

Should/can they be the same? Currently we use two different application secrets, with in general different expiration time.

To reduce confusion in the future / close to next expiration time (if we do not consolidate), the secrets in the app registration list now have more explicit names:

..to better communicate where the secret is used.