Import additional secrets via file uri (#25408)

modules/setting/oauth2.go

@@ -116,6 +116,8 @@ func loadOAuth2From(rootCfg ConfigProvider) {
 		return
 	}
 
+	OAuth2.JWTSecretBase64 = loadSecret(rootCfg.Section("oauth2"), "JWT_SECRET_URI", "JWT_SECRET")
+
 	if !filepath.IsAbs(OAuth2.JWTSigningPrivateKeyFile) {
 		OAuth2.JWTSigningPrivateKeyFile = filepath.Join(AppDataPath, OAuth2.JWTSigningPrivateKeyFile)
 	}