search

GDSC-IIIT-Kalyani / WOC-certificate-generator-Hactoberfest2021

An automatic certificate generator and emailer , web application
MIT License
16 stars 27 forks source link

[Critical] API token is in the repository #34

Open anjannair opened 3 years ago

anjannair commented 3 years ago

https://github.com/GDSC-IIIT-Kalyani/WOC-certificate-generator-Hactoberfest2021/blob/ba3b018c4b945f3f51e2995bc3268c34d7949bda/token.json#L1

https://github.com/GDSC-IIIT-Kalyani/WOC-certificate-generator-Hactoberfest2021/blob/ba3b018c4b945f3f51e2995bc3268c34d7949bda/credentials.json#L1

Your Google token and client secret are pushed publicly in the repository. Please use dotevn and .gitignore to avoid such tokens to be pushed into the public repository.

These tokens and credentials are meant to be hidden and not to be made public. I would advice you to reset these tokens so as to avoid misuse by anyone else.

yogesh-9999 commented 2 years ago

@anjannair assign me this issue