mirror of
https://github.com/suitenumerique/meet.git
synced 2026-10-08 06:20:57 +00:00
080c347129
The client id and client secret are auto-generated with high entropy when an application is created. Allowing them to be edited from the Django admin let any administrator replace them with a short or weak value, undermining that guarantee. Make both fields read-only in the admin so they can only be regenerated through the intended flow.