Dokploy/dokploy
1
0
Fork 0
mirror of https://github.com/Dokploy/dokploy.git synced 2026-07-10 16:35:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(auth): implement migration script for auth secret and refactor secret handling

Browse Source 
- Added a new script `migrate-auth-secret.ts` to facilitate the migration of 2FA secrets when changing the BETTER_AUTH_SECRET.
- Updated `package.json` to include a command for running the migration script.
- Refactored the handling of BETTER_AUTH_SECRET to improve security by removing the hardcoded default and introducing a fallback mechanism using environment variables or Docker secrets.
- Updated the authentication logic to utilize the new `betterAuthSecret` function for retrieving the secret.
This commit is contained in:
Mauricio Siu
2026-05-09 02:08:04 -06:00
parent 547ba2d04b
commit 9c71458eff
6 changed files with 131 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
packages/server/src/constants/index.ts
View File

@@ -83,11 +83,6 @@ const getDockerConfig = (): Docker => {
export const docker = getDockerConfig();
// When not set, use the legacy default so 2FA remains working for users who
// enabled it before BETTER_AUTH_SECRET was introduced.
export const BETTER_AUTH_SECRET =
process.env.BETTER_AUTH_SECRET || "better-auth-secret-123456789";
export const paths = (isServer = false) => {
const BASE_PATH =
isServer || process.env.NODE_ENV === "production"