CHSCodeForChange / Sapphire-Web

The website/backend repository for Sapphire, a platform to help organizations manage volunteers.
https://sapphire-web.herokuapp.com
GNU General Public License v3.0
8 stars 2 forks source link

Working credentials in settings.py #153

Open ydixken opened 5 years ago

ydixken commented 5 years ago

Hey there - I just stumbled across this repository and cloned it, after hitting an exception I looked into the related files. (My user creation wasn't possible, due to the non-authorized SMTP endpoint) However I found a test account, you should maybe consider removing these working credentials from this environment file.

sapphire/settings.py

EMAIL_HOST_USER = 'testemail2081@gmail.com' #this is a testing account EMAIL_USE_TLS = True EMAIL_HOST = 'smtp.gmail.com' EMAIL_HOST_PASSWORD = 'TandemTricycle' EMAIL_PORT = 587

jpaav commented 5 years ago

Hi Yannick,

I'm glad you're interested in Sapphire! We are aware that the password for the test email is publicly viewable. We decided to do this to make it easier for new collaborators within our organization to start using Sapphire. As such, we made the Gmail account testemail2081@gmail.com with the knowledge that it could be taken control of by anyone who looked at the project on GitHub. If you have any other questions about this project please let us know.

Thanks, Joe On Fri, Feb 15, 2019 at 3:17 PM Yannick Dixken notifications@github.com wrote:

Hey there - I just stumbled across this repository and cloned it, after hitting an exception I looked into the related files. (My user creation wasn't possible, due to the non-authorized SMTP endpoint) However I found a test account, you should maybe consider removing these working credentials from this environment file.

sapphire/settings.py

EMAIL_HOST_USER = 'testemail2081@gmail.com' #this is a testing account EMAIL_USE_TLS = True EMAIL_HOST = 'smtp.gmail.com' EMAIL_HOST_PASSWORD = 'TandemTricycle' EMAIL_PORT = 587

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/CHSCodeForChange/Sapphire-Web/issues/153, or mute the thread https://github.com/notifications/unsubscribe-auth/AK2sWI3cNtBLmXGlV98bOqG0S3qWe9cqks5vNxX1gaJpZM4a-XGl .