use secret in .env instead of hard coded one (#2718)

apache · Dec 21, 2023 · d751046 · d751046
1 parent 8cfe977
commit d751046
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/helix-front/server/app.ts b/helix-front/server/app.ts
@@ -58,7 +58,7 @@ app.use(bodyParser.urlencoded({ extended: true }));
 app.use(
   session({
     store: SESSION_STORE,
-    secret: 'helix',
+    secret: process.env.SECRET_TOKEN,
     resave: true,
     saveUninitialized: true,
     cookie: { expires: new Date(2147483647000) },