artin/API-Explorer-II
1
0
Fork 0
mirror of https://github.com/OpenBankProject/API-Explorer-II.git synced 2026-02-06 10:47:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #152 from OpenBankProject/revert_session_secret

Browse Source 
revert session secret
This commit is contained in:
tesobe-daniel 2026-01-31 10:06:25 +01:00 committed by GitHub
commit f3f0bf2b90
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
server/app.ts
View File

@ -118,20 +118,10 @@ console.info(
`Session maxAge configured: ${sessionMaxAgeSeconds} seconds (${sessionMaxAgeSeconds / 60} minutes)` `Session maxAge configured: ${sessionMaxAgeSeconds} seconds (${sessionMaxAgeSeconds / 60} minutes)`
) )
app.use(express.json()) app.use(express.json())
// Session secret - MUST be set in production
const sessionSecret =
process.env.VITE_OBP_SERVER_SESSION_PASSWORD || 'dev-secret-change-in-production'
if (!process.env.VITE_OBP_SERVER_SESSION_PASSWORD) {
console.warn(
'WARNING: VITE_OBP_SERVER_SESSION_PASSWORD is not set. Using default secret for development only.'
)
console.warn('WARNING: Set VITE_OBP_SERVER_SESSION_PASSWORD in your .env file for production!')
}
let sessionObject = { let sessionObject = {
store: redisStore, store: redisStore,
name: 'obp-api-explorer-ii.sid', // CRITICAL: Unique cookie name to prevent conflicts with other apps on localhost name: 'obp-api-explorer-ii.sid', // CRITICAL: Unique cookie name to prevent conflicts with other apps on localhost
secret: sessionSecret, secret: process.env.VITE_OBP_SERVER_SESSION_PASSWORD,
resave: false, resave: false,
saveUninitialized: false, // Don't save empty sessions (better for authenticated apps) saveUninitialized: false, // Don't save empty sessions (better for authenticated apps)
cookie: { cookie: {