Add secret key fallback with warning.

This commit is contained in:
Sage Vaillancourt 2022-09-24 10:25:04 -04:00
parent 3c02ce279e
commit aa212e2f1f
1 changed files with 6 additions and 1 deletions

View File

@ -1,6 +1,7 @@
# Copyright Sage Vaillancourt 2021 # Copyright Sage Vaillancourt 2021
import os import os
import sys
from flask import Flask from flask import Flask
@ -12,8 +13,12 @@ def create_app(test_config=None):
optimize_css_file() optimize_css_file()
app = Flask(__name__, instance_relative_config=True) app = Flask(__name__, instance_relative_config=True)
secret_key = os.environ.get('UNDERCOVER_SECRET_KEY')
if not secret_key:
sys.stderr.write("WARNING: UNDERCOVER_SECRET_KEY is not defined! Application may be insecure.\n")
secret_key = "dev"
app.config.from_mapping( app.config.from_mapping(
SECRET_KEY=os.environ['UNDERCOVER_SECRET_KEY'], SECRET_KEY=secret_key,
# DATABASE=os.path.join(app.instance_path, 'undercover.sqlite'), # DATABASE=os.path.join(app.instance_path, 'undercover.sqlite'),
) )