0x5t4l1n/OpenLearnX
1
0
Fork 0
mirror of https://github.com/th30d4y/OpenLearnX.git synced 2026-05-26 19:26:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Address code review feedback - persistent dev secrets and fix empty auth header

Browse Source 
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-01-31 18:42:45 +00:00
parent f04fc76eb9
commit a343b17ab3
3 changed files with 48 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/routes/auth.py
+16 -3
View File
@@ -20,9 +20,22 @@ db = client.openlearnx
JWT_SECRET = os.getenv('JWT_SECRET')
if not JWT_SECRET:
import warnings
warnings.warn("JWT_SECRET environment variable not set. Using randomly generated secret.", UserWarning)
import secrets as _secrets
JWT_SECRET = _secrets.token_hex(32)
import tempfile
warnings.warn("JWT_SECRET environment variable not set. Using persistent dev secret.", UserWarning)
# Use persistent file-based secret for development to avoid invalidating tokens on restart
_secret_file = os.path.join(tempfile.gettempdir(), '.openlearnx_dev_jwt_secret_auth')
try:
if os.path.exists(_secret_file):
with open(_secret_file, 'r') as f:
JWT_SECRET = f.read().strip()
if not JWT_SECRET:
import secrets as _secrets
JWT_SECRET = _secrets.token_hex(32)
with open(_secret_file, 'w') as f:
f.write(JWT_SECRET)
except Exception:
import secrets as _secrets
JWT_SECRET = _secrets.token_hex(32)
@bp.route('/nonce', methods=['POST', 'OPTIONS'])
def get_nonce():