fix: use process.env for runtime OAuth secrets

This commit is contained in:
emil
2026-05-15 01:25:27 +03:00
parent 4a13ba3272
commit 2b57cba3bb
4 changed files with 9 additions and 7 deletions
+2
View File
@@ -3,6 +3,8 @@ services:
build: .
ports:
- "4321:4321"
env_file:
- .env
environment:
- NODE_ENV=production
- HOST=0.0.0.0
+5 -5
View File
@@ -1,6 +1,6 @@
import { SignJWT, jwtVerify } from 'jose';
const JWT_SECRET = new TextEncoder().encode(import.meta.env.JWT_SECRET || '');
const JWT_SECRET = new TextEncoder().encode(process.env.JWT_SECRET || '');
export function generateCodeVerifier(): string {
const array = new Uint8Array(64);
@@ -30,16 +30,16 @@ export function generateState(): string {
}
export const vkOAuthConfig = {
clientId: import.meta.env.VK_CLIENT_ID || '',
clientSecret: import.meta.env.VK_CLIENT_SECRET || '',
clientId: process.env.VK_CLIENT_ID || '',
clientSecret: process.env.VK_CLIENT_SECRET || '',
authUrl: 'https://id.vk.com/oauth2/auth',
tokenUrl: 'https://id.vk.ru/oauth2/auth',
scope: 'email phone',
};
export const yandexOAuthConfig = {
clientId: import.meta.env.YANDEX_CLIENT_ID || '',
clientSecret: import.meta.env.YANDEX_CLIENT_SECRET || '',
clientId: process.env.YANDEX_CLIENT_ID || '',
clientSecret: process.env.YANDEX_CLIENT_SECRET || '',
authUrl: 'https://oauth.yandex.com/authorize',
tokenUrl: 'https://oauth.yandex.com/token',
scope: 'login:email login:info login:avatar',
+1 -1
View File
@@ -8,7 +8,7 @@ export const GET: APIRoute = async ({ url }) => {
const challenge = await generateCodeChallenge(verifier);
const state = generateState();
const redirectUri = `${import.meta.env.PUBLIC_APP_URL || url.origin}/api/auth/callback/vk`;
const redirectUri = `${process.env.PUBLIC_APP_URL || url.origin}/api/auth/callback/vk`;
const params = new URLSearchParams({
client_id: vkOAuthConfig.clientId,
+1 -1
View File
@@ -8,7 +8,7 @@ export const GET: APIRoute = async ({ url }) => {
const challenge = await generateCodeChallenge(verifier);
const state = generateState();
const redirectUri = `${import.meta.env.PUBLIC_APP_URL || url.origin}/api/auth/callback/yandex`;
const redirectUri = `${process.env.PUBLIC_APP_URL || url.origin}/api/auth/callback/yandex`;
const params = new URLSearchParams({
client_id: yandexOAuthConfig.clientId,