Bernt
bae705aa97
- Add NFC ePassport roadmap (ICAO 9303, eIDAS) - Add TensorFlow.js edge face detection (BlazeFace) - Add structured audit logger (GDPR-compliant) - Risk scoring support Part of KYC Apple Native UX v1.1.0
15 lines
796 B
Bash
15 lines
796 B
Bash
#!/bin/bash
|
|
# Fix 1: Ta bort hårdkodad JWT secret från period-workflow.mjs
|
|
|
|
FILE="/opt/amos/services/aamos-ledger/period-workflow.mjs"
|
|
BAK="${FILE}.bak-$(date +%s)"
|
|
|
|
# Skapa backup
|
|
cp "$FILE" "$BAK"
|
|
|
|
# Ersätt rad 24 (hårdkodad secret) med env-only + validering
|
|
sed -i "s/const _JWT_SECRET = process.env.AMOS_JWT_SECRET || process.env.JWT_SECRET || 'y8Lf__vnWpImX2lxyPo3R0WYFEgCrtmQ3r8FcCwKjAWTNsLBKhaqIrP5oGAdt31E';/const _JWT_SECRET = process.env.AMOS_JWT_SECRET || process.env.JWT_SECRET;\n\n\/\/ Kasta fel om JWT_SECRET saknas i production\nif (process.env.NODE_ENV === 'production' \&\& !_JWT_SECRET \&\& !_ledgerPrivKey) {\n throw new Error('AMOS_JWT_SECRET eller JWT_SECRET måste sättas i production');\n}/" "$FILE"
|
|
|
|
echo "Backup: $BAK"
|
|
echo "Fix applicerad på period-workflow.mjs"
|