2cad77c8fb
No more crash on missing JWT_SECRET. A random secret is generated automatically with a warning that sessions won't persist across restarts.
11 lines
345 B
JavaScript
11 lines
345 B
JavaScript
const crypto = require('crypto');
|
|
|
|
let JWT_SECRET = process.env.JWT_SECRET;
|
|
|
|
if (!JWT_SECRET) {
|
|
JWT_SECRET = crypto.randomBytes(32).toString('hex');
|
|
console.warn('WARNING: No JWT_SECRET set — using auto-generated secret. Sessions will reset on server restart. Set JWT_SECRET for persistent sessions.');
|
|
}
|
|
|
|
module.exports = { JWT_SECRET };
|