v3: code quality pass, various bug fixes

2026-03-23 07:47:49 +00:00
parent d94a319d96
commit fbbbb43258
44 changed files with 1060 additions and 698 deletions
--- a/api/lib/jwt.ts
+++ b/api/lib/jwt.ts
@@ -8,8 +8,13 @@ import {
  isInvitePayload,
 } from "../model/interfaces.ts";

-const JWT_SECRET = "FIXME-gerbeur-dev-env";
-const JWT_KEY = new TextEncoder().encode(JWT_SECRET);
+const jwtSecret = Deno.env.get("JWT_SECRET");
+if (!jwtSecret) {
+  throw new Error(
+    "JWT_SECRET environment variable is required. Generate one with: openssl rand -hex 32",
+  );
+}
+const JWT_KEY = new TextEncoder().encode(jwtSecret);

 // ── Invite tokens ─────────────────────────────────────────────────────────────