Externalize jwt, to be passed from outside container

informatici · Mar 23, 2023 · 165d36a · 165d36a
1 parent 25b3f86
commit 165d36a
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/patient-portal/src/main/java/org/isf/patientportal/security/jwt/TokenProvider.java b/patient-portal/src/main/java/org/isf/patientportal/security/jwt/TokenProvider.java
@@ -63,7 +63,7 @@ public class TokenProvider implements Serializable, InitializingBean {
 
     @Override
     public void afterPropertiesSet() {
-    	String secret = "EGnA2fAHSptY0TAjoQHuBDftkwuAjYmx6jTsNXVHy38lfHc0tvcaS3fPO3QOXPhpI8"; // env.getProperty("JWT_TOKEN_SECRET");
+    	String secret = env.getProperty("jwt.token.secret");
         log.info("Initializing JWT key with secret: {}", secret);
         // byte[] keyBytes = Decoders.BASE64.decode(SECRET);
         byte[] keyBytes = secret.getBytes(StandardCharsets.UTF_8);

diff --git a/patient-portal/src/main/resources/application.properties b/patient-portal/src/main/resources/application.properties
@@ -67,3 +67,7 @@ spring.flyway.check-location=true
 spring.flyway.locations=filesystem:sql/migrations
 spring.flyway.schemas=ohpp
 spring.flyway.enabled=true
+
+# Security token secret (JWT)
+jwt.token.secret=EGnA2fAHSptY0TAjoQHuBDftkwuAjYmx6jTsNXVHy38lfHc0tvcaS3fPO3QOXPhpI8
+