claunia/marechai
1
0
Fork 0
mirror of https://github.com/claunia/marechai.git synced 2026-07-08 17:57:08 +00:00
Code Issues 15 Packages Projects Releases Wiki Activity

Remove hardcoded secrets from appsettings.json

Browse Source 
JWT signing key and database connection string were committed in plaintext.
Both are now empty placeholders; real values live in .NET User Secrets (dev)
and must be supplied via environment variables or a secrets manager in production.
This commit is contained in:
Natalia Portillo
2026-07-04 14:46:39 +01:00
parent 325a3f437a
commit ab2a617600
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Marechai.Server/appsettings.json
View File

@@ -1,6 +1,6 @@
{ {
"ConnectionStrings": { "ConnectionStrings": {
"DefaultConnection": "server=mariadb-dev.claunia.com;port=3306;user=marechai;password=marechaipass;database=marechai;TreatTinyAsBoolean=false" "DefaultConnection": ""
}, },
"Logging": { "Logging": {
"LogLevel": { "LogLevel": {
@@ -67,7 +67,7 @@
} }
], ],
"Jwt": { "Jwt": {
"Key": "!SomethingSecret!!SomethingSecret!!SomethingSecret!!SomethingSecret!", "Key": "",
"Issuer": "apiWithAuthBackend", "Issuer": "apiWithAuthBackend",
"Audience": "apiWithAuthBackend" "Audience": "apiWithAuthBackend"
}, },