geosolutions-it / geonode-project

A django template project for creating custom GeoNode projects.
http://geonode.org
0 stars 5 forks source link

Do not use hardcoded oauth tokens #3

Open cezio opened 6 years ago

cezio commented 6 years ago

At the moment oauth tokens for GS app are hardcoded in:

https://github.com/geosolutions-it/geonode-generic/blob/master/tasks.py#L205-L207 https://github.com/geosolutions-it/geonode-project/blob/master/tasks.py#L188-L191 https://github.com/GeoNode/geoserver-geonode-ext/blob/master/geoserver/data/geonode_v213x/security/filter/geonode-oauth2/config.xml#L8-L9

We should parametrize them and generate tokens (especially secret) per deployment.

Also, instead of having fixture hardcoded in tasks.py, we can parse fixture from repo and change it in tasks.py to avoid duplication.