DevOpps/minitwit
Archived
Watch
5
2
Fork
You've already forked minitwit
 0
Code Issues 4 Pull requests Projects 1 Releases 15 Packages Activity Actions

Don't hard-code SECRET_KEY in source code #27

Closed
opened 2026-02-27 23:52:45 +01:00 by marfavi · 0 comments
marfavi commented 2026-02-27 23:52:45 +01:00
Owner

The SECRET_KEY for signing cookies is hardcoded in source code because of 1:1 migration from the original Python version.

It should instead be stored outside of publicly available source code (as an environment variable) and be cryptographically random.

See docs/MIGRATING.md

The `SECRET_KEY` for signing cookies is hardcoded in source code because of 1:1 migration from the original Python version. It should instead be stored outside of publicly available source code (as an environment variable) and be cryptographically random. See [docs/MIGRATING.md](docs/MIGRATING.md)
marfavi added this to the MiniTwit project 2026-02-27 23:52:45 +01:00
marfavi changed title from SECRET_KEY is hard-coded in source code to Don't hard-code SECRET_KEY in source code 2026-02-28 00:00:54 +01:00
Commenting is not possible because the repository is archived.
No Branch/Tag specified
Branches Tags
main
add-swarm
exam-handin
8.0
7.1
7.0
6.2
6.1
6.0
5.1
5.0.0
4.0.0
3.0.1
3.0.0
2.0.1
2.0.0
1.0.0
Labels
Clear labels   
operations

   
simulator api

   
tests

   
web app
No labels
operations
simulator api
tests
web app
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
MiniTwit
Assignees
Clear assignees
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
DevOpps/minitwit#27
No description provided.