# Feature XWI-179 - Wiki provider: Allow rotation of client secrets

Project: Stream XWiki integration
Status: specified
URL: https://community.openproject.org/work_packages/XWI-179

## Planning

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Target versions | Product Backlog |
| Sprint |  |
| Backlog bucket |  |
| Votes |  |
| List |  |
| Roadmap |  |
| Relevance |  |

## OPEN POINTS / FEEDBACK

_No work packages_

## Features and Chunks

_No work packages_

## Bugs and other work packages

_No work packages_

## Technical Details

| Attribute | Value |
| --- | --- |
| Module | Integrations / XWiki, Authentication / OAuth |
| Feature Flag |  |
| Requires doc change | No |
| Enterprise plan |  |

## Details

| Attribute | Value |
| --- | --- |
| Pull preview |  |
| Mockups |  |
| Accessibility | No |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer | Marc Alcobé |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Estimates and progress

| Attribute | Value |
| --- | --- |
| PD (min) |  |
| PD (max) |  |
| Work |  |
| Labor costs |  |

## Description

**As** an administrator  
**I want to** be able to rotate the client secret of an OAuth application alone,  
**so that** users of the instance don't lose their wiki connection the moment that an admin needs to rotate a secret.

**Acceptance criteria**

*   The OAuth application step of the wiki provider wizard can be opened for inspection
    
    *   it only shows the client id and does not allow to see or copy the secret
        
*   From within the inspection view of an existing OAuth application it's possible to rotate the client secret
    
    *   Afterwards the client id and secret can be copied again like after first setup of the OAuth app