func getKey() []byte {
h := sha256.New()
return h.Sum([]byte("TODO: pull secret key from safe place"))
}
This is clearly not acceptable for production, let's set this function up to pull from Docker secrets files like we do with Postgres when we are in a prod environment.
Right now in
jwt.go
we have this function:This is clearly not acceptable for production, let's set this function up to pull from Docker secrets files like we do with Postgres when we are in a prod environment.