--token-secret is now mandatory

auth/auth.go

@@ -36,7 +36,7 @@
 //
 //nolint:lll
 type TokenOptions struct {
-	SecretOpt          func(string) error `long:"token-secret" env:"AUTH_TOKEN_SECRET" ini-name:"secret" description:"hex HMAC256/AES256 secret for signing/verifying JWT & crypting (32 bytes)"`
+	SecretOpt          func(string) error `long:"token-secret" env:"AUTH_TOKEN_SECRET" ini-name:"secret" required:"t" description:"hex HMAC256/AES256 secret for signing/verifying JWT & crypting (32 bytes)"`
 	Secret             []byte             `no-flag:"t"`
 	Expiration         time.Duration      `no-flag:"t"`
 	ExpirationOpt      func(string) error `long:"token-expiration" ini-name:"expiration" required:"false" description:"Expiration time of the generated tokens" default:"5m"`