From 6b884e025458e8369f50b6b9ea145ee24755e826 Mon Sep 17 00:00:00 2001
From: Christoph Schaefer <christoph.schaefer@nextcloud.com>
Date: Wed, 24 Jun 2026 13:27:38 +0200
Subject: [PATCH] =?UTF-8?q?chore:=20replace=20short=20JWT=5FSECRET=20defau?=
 =?UTF-8?q?lts=20with=20=E2=89=A532-char=20value?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The EuroOffice connector v11+ enforces a minimum JWT secret length of
32 characters. Short defaults ("secret", "my_jwt_secret") in example
commands and the orchestrated entrypoint fallback would fail at runtime.

- README.md: update docker run example secret to ≥32 chars
- docker-entrypoint.sh: raise ${JWT_SECRET:=secret} fallback to 35 chars
- example-docker-entrypoint.sh: same
- document-server-integration: bump submodule to apply the same fix
  across all integration examples (see Euro-Office/document-server-integration PR)

Assisted-by: ClaudeCode:claude-sonnet-4-6
---
 README.md                                               | 2 +-
 build/scripts/orchestrated/docker-entrypoint.sh         | 2 +-
 build/scripts/orchestrated/example-docker-entrypoint.sh | 2 +-
 document-server-integration                             | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 5a9998650b..53efc0eeee 100644
--- a/README.md
+++ b/README.md
@@ -18,7 +18,7 @@ We currently provide a docker image for testing and integration purposes. We are
 
 ```
 docker pull ghcr.io/euro-office/documentserver:latest
-docker run -i -t -d -p 8080:80 --restart=always -e EXAMPLE_ENABLED=true -e JWT_SECRET=my_jwt_secret ghcr.io/euro-office/documentserver:latest
+docker run -i -t -d -p 8080:80 --restart=always -e EXAMPLE_ENABLED=true -e JWT_SECRET=my_long_jwt_secret_at_least_32_chars ghcr.io/euro-office/documentserver:latest
 ```
 
 ### Building
diff --git a/build/scripts/orchestrated/docker-entrypoint.sh b/build/scripts/orchestrated/docker-entrypoint.sh
index 2be78aad84..3d53eec214 100755
--- a/build/scripts/orchestrated/docker-entrypoint.sh
+++ b/build/scripts/orchestrated/docker-entrypoint.sh
@@ -135,7 +135,7 @@ export NODE_CONFIG='{
       },
       "secret": {
         "inbox": {
-          "string": "'${JWT_SECRET_INBOX:-${JWT_SECRET:=secret}}'"
+          "string": "'${JWT_SECRET_INBOX:-${JWT_SECRET:=euro-office-dev-jwt-secret-key-2026}}'"
         },
         "outbox": {
           "string": "'${JWT_SECRET_OUTBOX:-${JWT_SECRET}}'"
diff --git a/build/scripts/orchestrated/example-docker-entrypoint.sh b/build/scripts/orchestrated/example-docker-entrypoint.sh
index e124442f87..e7c86470fd 100755
--- a/build/scripts/orchestrated/example-docker-entrypoint.sh
+++ b/build/scripts/orchestrated/example-docker-entrypoint.sh
@@ -5,7 +5,7 @@ export NODE_CONFIG='{
         "siteUrl": "'${DS_URL:-"/"}'",
         "token": {
           "enable": '${JWT_ENABLED:-false}',
-          "secret": "'${JWT_SECRET:-secret}'",
+          "secret": "'${JWT_SECRET:-euro-office-dev-jwt-secret-key-2026}'",
           "authorizationHeader": "'${JWT_HEADER:-Authorization}'"
         }
       }
diff --git a/document-server-integration b/document-server-integration
index 3c01ddb5d0..41183fb4d8 160000
--- a/document-server-integration
+++ b/document-server-integration
@@ -1 +1 @@
-Subproject commit 3c01ddb5d05e2a6de2cbb41b568fb3fd525c2c0a
+Subproject commit 41183fb4d84dd5d0f6abc463aecf4e6215084ea0