eeg_portal/application-dev.yml at 6770be9bef64af36c2c1bf4c75ee40e915176550 - eeg_portal - Gitea: Git with a cup of tea

Semmal/eeg_portal

Bernhard Müller 6770be9bef fix(security): externalize CORS origins, secure JWT secret default, fix RouterLink import

- Externalize CORS origins via app.cors-origins property (configurable per environment)
- Remove hardcoded JWT secret fallback; use env-var-only with safe test default
- Disable show-sql by default (enable only in dev profile)
- Create application-dev.yml with safe development defaults
- Add missing RouterLink import in MyMembershipsComponent (fixes runtime error)

2026-07-22 09:09:36 +02:00

8 lines

138 B

YAML

Raw Blame History

 spring:
   jpa:
     show-sql: true
 jwt:
   secret: dev-only-secret-do-not-use-in-production-2025
 app:
   cors-origins: http://localhost:4200