This is an automated email from the ASF dual-hosted git repository.

lahirujayathilake pushed a commit to branch auth-endpoints-web
in repository https://gitbox.apache.org/repos/asf/airavata-custos.git

commit 6fc11b2fd9170d7f34c7dd1366c264d11fa4f58f
Author: lahiruj <[email protected]>
AuthorDate: Wed Jun 17 16:16:35 2026 -0400

    Require NEXTAUTH_SECRET to be set and at least 32 chars
---
 web/src/lib/env.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/lib/env.ts b/web/src/lib/env.ts
index 35f966d0c..5c5a71116 100644
--- a/web/src/lib/env.ts
+++ b/web/src/lib/env.ts
@@ -2,7 +2,7 @@ import { z } from "zod";
 
 export const serverSchema = z.object({
   NODE_ENV: z.enum(["development", "test", 
"production"]).default("development"),
-  NEXTAUTH_SECRET: z.string().min(8).default("dev-secret-do-not-use-in-prod"),
+  NEXTAUTH_SECRET: z.string().min(32),
   NEXTAUTH_URL: z.string().url().optional(),
 
   CUSTOS_CORE_API_BASE_URL: z.string().url().default("http://localhost:8080";),

Reply via email to