Skip to content

sec(site,sanity): harden guest portal secret, scrub private emails & tokens - #764

Merged
codercatdev merged 1 commit into
devfrom
fix/guest-portal-security-hardening
Oct 21, 2026
Merged

codercatdev merged 1 commit into
devfrom
fix/guest-portal-security-hardening

Conversation

@codercatdev

Copy link
Copy Markdown
Contributor

Removes fallback signing key in favor of 256-bit GUEST_PORTAL_SECRET in GitHub/Cloudflare Worker Secrets, removes private guest emails and plaintext tokens from sync-guest-socials.mjs, and explicitly unsets socials.email and portalToken in Sanity datasets.

@codercatdev
codercatdev merged commit c7ee673 into dev Oct 21, 2026
@codercatdev
codercatdev deleted the fix/guest-portal-security-hardening branch October 21, 2026 17:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant