From 93aa9fdff3fd50d7b13f9592ce7a931e04e80d2b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bernhard=20M=C3=BCller?= <postmuller@gmail.com>
Date: Wed, 22 Jul 2026 07:50:27 +0200
Subject: [PATCH] fix(security): externalize JWT secret via environment
 variable

- jwt.secret now reads from JWT_SECRET env var
- Falls back to dev default if not set
---
 eeg_backend/src/main/resources/application.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eeg_backend/src/main/resources/application.yml b/eeg_backend/src/main/resources/application.yml
index 13b516a..ea76c0b 100644
--- a/eeg_backend/src/main/resources/application.yml
+++ b/eeg_backend/src/main/resources/application.yml
@@ -11,7 +11,7 @@ spring:
       ddl-auto: update
     show-sql: true
 jwt:
-  secret: MeinSuperGeheimesUndSehrLangesSecretFuerDasEnergiePortal2025!
+  secret: ${JWT_SECRET:MeinSuperGeheimesUndSehrLangesSecretFuerDasEnergiePortal2025!}
 app:
   frontend-url: http://localhost:4200
   backend-url: http://localhost:8080
\ No newline at end of file