fix: address security concerns in constants (path and credentials)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
2026-03-04 01:52:02 +08:00
parent af080cee2a
commit c4a25fced2

View File

@@ -1,6 +1,7 @@
// lib/constants.ts
export const RESOURCE_PATH = process.env.RESOURCE_PATH || '/Users/tech/workspace/n3-world/handy-tools/ftdl';
export const RESOURCE_PATH = process.env.RESOURCE_PATH || './resources';
// WARNING: Change these default credentials in production!
export const AUTH_USERNAME = process.env.AUTH_USERNAME || 'admin';
export const AUTH_PASSWORD = process.env.AUTH_PASSWORD || 'admin';
export const AUTH_PASSWORD = process.env.AUTH_PASSWORD || 'changeme'; // Change in production!
export const COOKIE_NAME = 'auth';
export const COOKIE_MAX_AGE = 86400; // 24 hours