mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-09-30 04:53:11 +00:00
Adam Moussa
c887d6d9d8
Replace all hardcoded credentials with configuration-injected values:
- SQL Server connection strings -> ${CONNECTION_STRING} env-var placeholders (4 appsettings files)
- SendGrid API keys -> ${SENDGRID_API_KEY} (incl. commented copies in SendMessage.cs)
- JWT signing secret -> ${JWT_SECRET} (3 appsettings files)
- AWS access key pair in UploadFileHp.cs -> DI-injected IAmazonS3 (SDK default credential chain)
- Google Maps API keys in App.razor / Home.razor -> IConfiguration lookup
- Legacy SMTP credentials in SendMessage.cs comments -> placeholders
Add .env.example documenting required environment variables and a
Configuration & Secrets section in BACKEND_ARCHITECTURE.md.
All exposed credentials were rotated 2026-06-05 prior to this scrub.
Source: github-audit-report.md Criticals 1-2 (Agent A4).
Verified: dotnet build 0 errors; secret-pattern grep clean.
|
||
|---|---|---|
| .. | ||
| .config | ||
| Controllers | ||
| DTOs | ||
| Helper | ||
| Models | ||
| Properties | ||
| wwwroot | ||
| Api.SeaHavenIndustries.csproj | ||
| Api.SeaHavenIndustries.http | ||
| appsettings.Development.json | ||
| appsettings.json | ||
| appsettings.Production.json | ||
| aws-beanstalk-tools-defaults.json | ||
| db.txt | ||
| Program.cs | ||