hikmettan/ihaleist
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

require auth secret in production

Browse Source
This commit is contained in:
hikmettan
2026-09-06 17:33:35 +03:00
parent db3d2d67bc
commit 410bd2de1f
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/auth.mjs
+6 -2
View File
@@ -10,8 +10,12 @@ import crypto from 'node:crypto';
import https from 'node:https'; import https from 'node:https';
const CLIENT_ID = () => process.env.GOOGLE_CLIENT_ID || null; const CLIENT_ID = () => process.env.GOOGLE_CLIENT_ID || null;
const AUTH_SECRET = () => const AUTH_SECRET = () => {
process.env.AUTH_SECRET || process.env.GOOGLE_CLIENT_ID || 'ihaleist-dev-secret'; const configured = process.env.AUTH_SECRET || process.env.GOOGLE_CLIENT_ID;
if (configured) return configured;
if (process.env.NODE_ENV === 'production') throw new Error('Üretimde AUTH_SECRET zorunludur.');
return 'ihaleist-dev-secret';
};
const TOKEN_TTL_SEC = 30 * 24 * 60 * 60; // 30 gün const TOKEN_TTL_SEC = 30 * 24 * 60 * 60; // 30 gün
export function adminEmails() { export function adminEmails() {