Worked Proof shown
Signal K authentication and secret handling repaired
A contributor used Claude Code to stop Signal K copying environment-managed OIDC secrets into its saved configuration.
—
Credits
Earliest dated source:
The full story
A contributor used Claude Code to stop Signal K copying environment-managed OIDC secrets into its saved configuration.
The source explains how the copied value could travel with backups and remain active after its environment variable was removed. A related contribution changes permission mapping for individual identities as well as groups.
How it was done
Tools
Themes
Loading themes…
Sources
From the maker's own write-up or code. We summarise what they report; we haven't tested it ourselves.
- Signal K Server: fix(oidc): stop writing environment-provided client secret into security.jsonSource byline: keesverruijtPublished
The contributor’s pull request, including its AI disclosure and test notes.
- Signal K Server: feat(oidc): map permissions from user identity as well as groupsSource byline: mark-brannanPublished
The contributor’s pull request, including its AI disclosure and test notes.