EMERGENCY FIXES: ✅ DELETE MockSilverPayService.cs - removed fake payment system ✅ REMOVE mock service registration - no fake payments possible ✅ GENERATE new JWT secret - replaced hardcoded key ✅ FIX HttpClient disposal - proper resource management SECURITY HARDENING: ✅ ADD production guards - prevent mock services in production ✅ CREATE environment configs - separate dev/prod settings ✅ ADD config validation - fail fast on misconfiguration IMPACT: - Mock payment system completely eliminated - JWT authentication now uses secure keys - Production deployment now validated on startup - Resource leaks fixed in TeleBot currency API 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
32 lines
948 B
JSON
32 lines
948 B
JSON
{
|
|
"ConnectionStrings": {
|
|
"DefaultConnection": "Data Source=littleshop.db"
|
|
},
|
|
"Jwt": {
|
|
"Key": "8aiNFkRrOao7/vleviWM8EP5800dMOh2hlaKGJoQOQvaxxOVHM3eLAb3+5KN8EcjKZKREHttGKUfvtQrV3ZM4A==",
|
|
"Issuer": "LittleShop",
|
|
"Audience": "LittleShop",
|
|
"ExpiryInHours": 24
|
|
},
|
|
"RoyalMail": {
|
|
"ClientId": "",
|
|
"ClientSecret": "",
|
|
"BaseUrl": "https://api.royalmail.net/",
|
|
"SenderAddress1": "SilverLabs Ltd, 123 Business Street",
|
|
"SenderCity": "London",
|
|
"SenderPostCode": "SW1A 1AA",
|
|
"SenderCountry": "United Kingdom"
|
|
},
|
|
"WebPush": {
|
|
"VapidPublicKey": "BMc6fFJZ8oIQKQzcl3kMnP9tTsjrm3oI_VxLt3lAGYUMWGInzDKn7jqclEoZzjvXy1QXGFb3dIun8mVBwh-QuS4",
|
|
"VapidPrivateKey": "dYuuagbz2CzCnPDFUpO_qkGLBgnN3MEFZQnjXNkc1MY",
|
|
"Subject": "mailto:admin@littleshop.local"
|
|
},
|
|
"Logging": {
|
|
"LogLevel": {
|
|
"Default": "Information",
|
|
"Microsoft.AspNetCore": "Warning"
|
|
}
|
|
},
|
|
"AllowedHosts": "*"
|
|
} |