[Bug]: Eurooffice jwt_secret is exposed in system report

[ckujau]

⚠️ This issue respects the following points: ⚠️

• This is a bug, not a question or a configuration/webserver/proxy issue.
• This issue is not already reported on Github OR Nextcloud Community Forum (I've searched it).
• Nextcloud Server is up to date. See Maintenance and Release Schedule for supported versions.
• I agree to follow Nextcloud's Code of Conduct.

Bug description

This is basically a copy of nextcloud/all-in-one#8317 but apparently this never was reported for the server component.

When running occ config:list system (as recommended for support request in the forum) some jwt_secret values are removed, but not all.

Steps to reproduce

1. Run occ config:list system
2. The jwt_secret for onlyoffice is shown as ***REMOVED SENSITIVE VALUE*** as expected.
3. The jwt_secret for eurooffice is shown in full.

Example:

$ occ config:list system | grep -C2 jwt_secret
        "onlyoffice": {
            "editors_check_interval": 0,
            "jwt_secret": "***REMOVED SENSITIVE VALUE***",
            "jwt_header": "AuthorizationJwt"
        },
--
          "eurooffice": {
            "editors_check_interval": 0,
            "jwt_secret": "121a9a87872516cc07500b570cbf54c175cae10d",
            "jwt_header": "AuthorizationJwt"
        },

Expected behavior

The jwt_secret for eurooffice should be shonw with sensitive values removed.

Nextcloud Server version

33

Operating system

Debian/Ubuntu

PHP engine version

PHP 8.3

Web server

Apache (supported)

Database engine version

PostgreSQL

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

• Default user-backend (database)
• LDAP/ Active Directory
• SSO - SAML
• Other

Configuration report

List of activated Apps

- eurooffice: 11.0.2

Nextcloud Signing status

No errors have been found.

Nextcloud Logs

Additional info

No response