fix: use env variable to set jwt secret

Vizzuality · Dec 25, 2024 · 6a4ea80 · 6a4ea80
1 parent 554e84c
commit 6a4ea80
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/backend_ci_cd.yml b/.github/workflows/backend_ci_cd.yml
@@ -21,6 +21,7 @@ jobs:
       FRONTEND_URL: http://localhost:4000/sub-path
       FRONTEND_API_SECRET: SECRET
       SECRET_KEY_BASE: SECRET
+      JWT_SECRET: SECRET
 
     services:
       postgres:

diff --git a/backend/.env.sample b/backend/.env.sample
@@ -1,5 +1,6 @@
 # RAILS APP
 SECRET_KEY_BASE=
+JWT_SECRET=
 BACKEND_URL=http://localhost:4000/sub-path/backend
 RAILS_RELATIVE_URL_ROOT=/sub-path/backend
 

diff --git a/backend/app/services/jwt_auth.rb b/backend/app/services/jwt_auth.rb
@@ -1,6 +1,6 @@
 class JWTAuth
   ALGORITHM = "HS256".freeze
-  SECRET = Rails.application.secrets.secret_key_base
+  SECRET = ENV["JWT_SECRET"]
 
   def self.encode(member)
     payload = {