ISSUE_NUMBER: GH-38
Description
The JWT_SECRET is hardcoded in the serverless.yml file, which is a security risk.
File: repositories/QuestionBankapi/serverless.yml
Line: 17
Severity: critical
Current Behavior
The JWT secret is exposed in the configuration file.
Expected Behavior
The JWT secret should be stored in a secure environment variable or a secrets management system.
Suggested Fix
Replace the hardcoded secret with an environment variable lookup.
Code Context
JWT_SECRET: flskdjflksdajffds
Additional Notes
This is a critical security vulnerability that could allow attackers to forge JWT tokens.
ISSUE_NUMBER: GH-38
Description
The
JWT_SECRETis hardcoded in theserverless.ymlfile, which is a security risk.File:
repositories/QuestionBankapi/serverless.ymlLine: 17
Severity: critical
Current Behavior
The JWT secret is exposed in the configuration file.
Expected Behavior
The JWT secret should be stored in a secure environment variable or a secrets management system.
Suggested Fix
Replace the hardcoded secret with an environment variable lookup.
Code Context
Additional Notes
This is a critical security vulnerability that could allow attackers to forge JWT tokens.