From 51088b1775c59dea0501d18f60d4d8f08d773c2b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Enes=20Yak=C4=B1=C5=9Ft=C4=B1r?= <yaknetbilisim@gmail.com>
Date: Sun, 30 Aug 2026 12:51:04 +0300
Subject: [PATCH] security(config): remove hardcoded client secret defaults and
 bump v1.0.1

---
 main.js      | 13 ++++++++-----
 package.json |  2 +-
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/main.js b/main.js
index 80204f0..c0efac7 100644
--- a/main.js
+++ b/main.js
@@ -1,9 +1,9 @@
-const crypto = require('crypto');
+const crypto = require('crypto');
 const https = require('https');
 const http = require('http');
 
-let clientId = '01a03c41-f758-721e-b927-619bffde5c23';
-let clientSecret = 'hNx0p20XT8QI0Ut9irh0o5cvqW6rNQOuS2tgoqir';
+let clientId = '';
+let clientSecret = '';
 let authBaseUrl = 'https://auth.yakhub.com.tr';
 
 function postRequest(urlStr, data) {
@@ -86,22 +86,25 @@ async function register({ registerExternalAuth, registerSetting, settingsManager
     name: 'client-id',
     label: 'YakNet Client ID',
     type: 'input',
+    description: 'Your YakNet OAuth2 Client ID',
     private: false,
-    default: '01a03c41-f758-721e-b927-619bffde5c23'
+    default: ''
   });
 
   registerSetting({
     name: 'client-secret',
     label: 'YakNet Client Secret',
     type: 'input-password',
+    description: 'Your YakNet OAuth2 Client Secret',
     private: true,
-    default: 'hNx0p20XT8QI0Ut9irh0o5cvqW6rNQOuS2tgoqir'
+    default: ''
   });
 
   registerSetting({
     name: 'auth-base-url',
     label: 'YakNet Auth URL',
     type: 'input',
+    description: 'YakNet SSO Server URL (Default: https://auth.yakhub.com.tr)',
     private: false,
     default: 'https://auth.yakhub.com.tr'
   });
diff --git a/package.json b/package.json
index 4c3092a..5179308 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "peertube-plugin-auth-yaknet",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "YakNet SSO & OAuth2 Single Sign-On Authentication Plugin for PeerTube",
   "main": "main.js",
   "clientScripts": [