From 9c99787b1ff6af2f32456fb458946ae6dc31cdc4 Mon Sep 17 00:00:00 2001
From: Rene Luria <rene.luria@infomaniak.com>
Date: Mon, 29 Jun 2026 16:42:51 +0200
Subject: [PATCH] fix: remove hard coded old secret

---
 myice/webapi.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/myice/webapi.py b/myice/webapi.py
index ed3ff02..6b44a64 100644
--- a/myice/webapi.py
+++ b/myice/webapi.py
@@ -10,9 +10,9 @@ from . import myice
 
 # OIDC Configuration
 CLIENT_ID = os.environ.get("CLIENT_ID", "8ea04fbb-4237-4b1d-a895-0b3575a3af3f")
-CLIENT_SECRET = os.environ.get(
-    "CLIENT_SECRET", "5iXycu7aU6o9e17NNTOUeetQkRkBqQlomoD2hTyLGLTAcwj0dwkkLH3mz1IrZSmJ"
-)
+CLIENT_SECRET = os.environ.get("CLIENT_SECRET")
+if not CLIENT_SECRET:
+    raise RuntimeError("CLIENT_SECRET environment variable must be set")
 REDIRECT_URI = os.environ.get("REDIRECT_URI", "http://localhost:8000/callback")
 AUTHORIZATION_ENDPOINT = "https://login.infomaniak.com/authorize"
 TOKEN_ENDPOINT = "https://login.infomaniak.com/token"