security: remove all hardcoded API keys, require from environment

2026-02-11 21:33:18 +01:00
parent b36e5a33ea
commit 15675390ac
46 changed files with 107 additions and 107 deletions
--- a/apps/coordinator-api/src/app/config.py
+++ b/apps/coordinator-api/src/app/config.py
@@ -11,9 +11,9 @@ class Settings(BaseSettings):

    database_url: str = "sqlite:///./coordinator.db"

-    client_api_keys: List[str] = ["REDACTED_CLIENT_KEY"]
-    miner_api_keys: List[str] = ["REDACTED_MINER_KEY"]
-    admin_api_keys: List[str] = ["REDACTED_ADMIN_KEY"]
+    client_api_keys: List[str] = []
+    miner_api_keys: List[str] = []
+    admin_api_keys: List[str] = []

    hmac_secret: Optional[str] = None
    allow_origins: List[str] = ["*"]