From de231e5b06a3f962cb7ba4c22546c1069ae61c91 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fredrik=20Adel=C3=B6w?= <freben@gmail.com>
Date: Tue, 5 Apr 2022 15:32:06 +0200
Subject: [PATCH] declare the oauth2proxy clientSecret a secret
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Fredrik Adelöw <freben@gmail.com>
---
 .changeset/late-turtles-sparkle.md | 5 +++++
 plugins/auth-backend/config.d.ts   | 3 +++
 2 files changed, 8 insertions(+)
 create mode 100644 .changeset/late-turtles-sparkle.md

diff --git a/.changeset/late-turtles-sparkle.md b/.changeset/late-turtles-sparkle.md
new file mode 100644
index 0000000000..f0b28cdb87
--- /dev/null
+++ b/.changeset/late-turtles-sparkle.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Declare oauth2 `clientSecret` with visibility secret
diff --git a/plugins/auth-backend/config.d.ts b/plugins/auth-backend/config.d.ts
index 791bd3606b..af5a3c24be 100644
--- a/plugins/auth-backend/config.d.ts
+++ b/plugins/auth-backend/config.d.ts
@@ -90,6 +90,9 @@ export interface Config {
       oauth2?: {
         [authEnv: string]: {
           clientId: string;
+          /**
+           * @visibility secret
+           */
           clientSecret: string;
           authorizationUrl: string;
           tokenUrl: string;