nanakura/moeka-project
1
0
Fork 0
Code Issues Pull Requests 1 Actions 1 Packages Projects Releases Wiki Activity

feat(server): require BETTER_AUTH_SECRET and pass it explicitly to betterAuth

Browse Source 
Without a stable secret, better-auth generates a random one per process,
which invalidates every session cookie and JWKS private key on redeploy
and across multi-instance deployments. Make it a required env var and
wire it into betterAuth({ secret }) explicitly so missing config fails
fast at boot instead of silently rotating keys.
This commit is contained in:
RainbowBird
2026-04-13 18:13:19 +08:00
parent 61371060e7
commit fc0ad03411
4 changed files with 18 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/server/.env
+10 -8
View File
@@ -1,16 +1,18 @@
DATABASE_URL="postgresql://postgres:example-PAssw0rd-xHjDYR.b7N@db:5432/postgres"
REDIS_URL="redis://localhost:6379"
AUTH_GOOGLE_CLIENT_ID="change-me"
AUTH_GOOGLE_CLIENT_SECRET="change-me"
BETTER_AUTH_SECRET=""
AUTH_GITHUB_CLIENT_ID="change-me"
AUTH_GITHUB_CLIENT_SECRET="change-me"
AUTH_GOOGLE_CLIENT_ID=""
AUTH_GOOGLE_CLIENT_SECRET=""
STRIPE_SECRET_KEY="change-me"
STRIPE_WEBHOOK_SECRET="change-me"
AUTH_GITHUB_CLIENT_ID=""
AUTH_GITHUB_CLIENT_SECRET=""
CLIENT_URL="change-me"
API_SERVER_URL="change-me"
STRIPE_SECRET_KEY=""
STRIPE_WEBHOOK_SECRET=""
CLIENT_URL=""
API_SERVER_URL=""
# OTEL_EXPORTER_OTLP_ENDPOINT="http://localhost:4318"