fix(qqbot): harden clientSecret SecretRefs

This commit is contained in:
Peter Steinberger
2026-05-03 12:07:36 +01:00
parent 40f970a13d
commit c850d1bb0d
8 changed files with 158 additions and 34 deletions

View File

@@ -102,6 +102,8 @@ Notes:
- `openclaw channels add --channel qqbot --token-file ...` provides the
AppSecret only; the AppID must already be set in config or `QQBOT_APP_ID`.
- `clientSecret` also accepts SecretRef input, not just a plaintext string.
- Legacy `secretref:/...` marker strings are not valid `clientSecret` values;
use structured SecretRef objects like the example above.
### Multi-account setup

View File

@@ -90,8 +90,6 @@ Scope intent:
- `channels.feishu.accounts.*.appSecret`
- `channels.feishu.accounts.*.encryptKey`
- `channels.feishu.accounts.*.verificationToken`
- `channels.qqbot.clientSecret`
- `channels.qqbot.accounts.*.clientSecret`
- `channels.msteams.appPassword`
- `channels.mattermost.botToken`
- `channels.mattermost.accounts.*.botToken`

View File

@@ -281,20 +281,6 @@
"secretShape": "secret_input",
"optIn": true
},
{
"id": "channels.qqbot.accounts.*.clientSecret",
"configFile": "openclaw.json",
"path": "channels.qqbot.accounts.*.clientSecret",
"secretShape": "secret_input",
"optIn": true
},
{
"id": "channels.qqbot.clientSecret",
"configFile": "openclaw.json",
"path": "channels.qqbot.clientSecret",
"secretShape": "secret_input",
"optIn": true
},
{
"id": "channels.slack.accounts.*.appToken",
"configFile": "openclaw.json",