Swirrl / drafter

A clojure service and a client to it for exposing data management operations to PMD
Other
0 stars 0 forks source link

.envrc.example secret key needs to be rotated #643

Closed scottlowe closed 1 year ago

scottlowe commented 1 year ago

I have spoken to @RickMoynihan concerning the secret key in:

https://github.com/Swirrl/drafter/blob/master/.envrc.example

He says that it needs to be rotated.

RickMoynihan commented 1 year ago

The secret has been rotated and we've changed the auth0 app from client-id 7klE... to DNsl.... I have updated the circleci contexts to contain the new client id and secret. Dev users can find the secret in 1password as Drafter Dev AUTH0_CLIENT_SECRET

This is because 7klE... is also used in the muttnik repo. The drafter repo at least should now be clear.

scottlowe commented 1 year ago

This issue relates to https://github.com/Swirrl/swirrl-auth0/issues/30