Commit dcf2eacf authored by sim's avatar sim

[FIX] Don't use hardcoded secret key for JWT

parent df359663
......@@ -180,7 +180,7 @@ REST_FRAMEWORK = {
JWT_AUTH = {
'JWT_PAYLOAD_HANDLER': 'gargantext.util.jwt.jwt_payload_handler',
'JWT_VERIFY_EXPIRATION': True,
'JWT_SECRET_KEY': 'Mw/q=efK3ai7}?}?!D68}a2.j}G5;1]ceI;OV1l=N^(-mH+%l=',
'JWT_SECRET_KEY': config('SECRET_KEY'),
'JWT_EXPIRATION_DELTA': datetime.timedelta(seconds=36000),
'JWT_AUTH_HEADER_PREFIX': 'Bearer',
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment