← Commit history

Overwrite bundled credentials.json with a tombstone (remove Adom client_id from public package)

John Lauer ·2e95b7f8c3 ·4mo ago ·parent 1d56775
1 file changed +1−3
bin/credentials.json+1−3
@@ -1,5 +1,3 @@ {-  "_comment": "BROKER MODE: only the PUBLIC client_id ships here (it appears in every consent URL anyway). The client SECRET lives ONLY on the OAuth gateway service container (creds/adom-google.json, 0600) — never on user containers, never in this repo. The gateway does the code->token exchange and the refresh on our behalf. To point at a different shared client, change clientId here AND the gateway's creds file.",-  "clientId": "432727599812-g01vp9dso4c2lu942fb8qi305dbhdgrv.apps.googleusercontent.com",-  "app": "adom-google"+  "_removed": "adom-google no longer bundles an OAuth client. The open-source package ships NO provider (no gateway, no client_id). Configure yours with `adom-google provider set`, copy provider.example.json, or — Adom staff — install the private adom-google-adom package. This stub exists only because the wiki file API can't delete files." }