I like using configVars to manage secrets as it’s a one place for all kind of thing.
But, I couldnt get retoolContext.configVars in apps to show secrets.
The secrets are only shown in workflows.
Is this expected?
Yes, but let me clarify the behavior that you're seeing. By marking a given variable as secret, you're telling Retool that its value is sensitive and should never be exposed to the client. This means that you can only reference said variable within code that will execute on the backend - workflows and resource authentication, namely.
I hope that clears things up! Let me know if you have any additional questions.