separate public client id from auth secret

2026-09-06 17:35:40 +03:00
parent 0958d90408
commit 887cd5872f
1 changed files with 2 additions and 3 deletions
@@ -11,10 +11,9 @@ import https from 'node:https';

 const CLIENT_ID = () => process.env.GOOGLE_CLIENT_ID || null;
 const AUTH_SECRET = () => {
-  const configured = process.env.AUTH_SECRET || process.env.GOOGLE_CLIENT_ID;
-  if (configured) return configured;
+  if (process.env.AUTH_SECRET) return process.env.AUTH_SECRET;
  if (process.env.NODE_ENV === 'production') throw new Error('Üretimde AUTH_SECRET zorunludur.');
-  return 'ihaleist-dev-secret';
+  return process.env.GOOGLE_CLIENT_ID || 'ihaleist-dev-secret';
 };
 const TOKEN_TTL_SEC = 30 * 24 * 60 * 60; // 30 gün