[Bug]: /api/applications/home includes the App Client Secret

[meretrout]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

I have setup a Generic OAuth Provider using Azure. I noticed that the Client Secret is shown on /api/applications/home

Expected Behavior

This is an unnecessary security risk.

Steps to reproduce

Setup Generic OAuth Provider using Azure.

Environment

Clean install of 2.5.3 running in an all-in-one Docker container.

Additional Information

No response

[dragonpoo]

Can you attach a screenshot here? @meretrout

[meretrout]

Here you go @dragonpoo

It shows the client secrets of the Azure and Google oauth apps.

[adnanqaops]

This has been fixed and released in V2.6.1 . So, closing out this ticket.