# Bug XWI-172 - Can't connect from XWiki to OpenProject with credentials seeded from environment

Project: Stream XWiki integration
Status: merged
URL: https://community.openproject.org/work_packages/XWI-172

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module | Integrations / XWiki |
| Target versions | 18.0.0 |
| Observed in versions | 17.9.0 |
| Sprint |  |
| Backlog bucket |  |
| Bug found in version (deprecated) |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers | Jan Sandbrink |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Effort (shirt size) |  |
| Work |  |
| Labor costs |  |

## Description

###   

### Steps to reproduce

1.  Seed an XWiki provider from the environment
    
2.  Try to connect to OpenProject using the OAuth credentials configured (important: This is about XWiki -> OP connections, not the other way around)
    
    1.  i.e. try to obtain an access token
        

### What is the buggy behavior?

*   Connection doesn't work
    
*   Checking the created `Doorkeeper::Application` in the database, the secret is clearly readable
    

### What is the expected behavior?

*   The connection should work (e.g. access tokens should be obtainable)
    
*   The client secret should be stored in a non-reversible format
    

###   

### Environment information

**OpenProject version**

17.9