From 5b6140288b9a95642a5d449d300fe74f6c670d60 Mon Sep 17 00:00:00 2001 From: hermes-agent Date: Wed, 5 Aug 2026 12:33:51 +0200 Subject: [PATCH] Remove hardcoded Google OAuth client_secret from google-workspace-mcp-login.py --- one-shot/google-workspace-mcp-login.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/one-shot/google-workspace-mcp-login.py b/one-shot/google-workspace-mcp-login.py index f282895..8a77a7e 100644 --- a/one-shot/google-workspace-mcp-login.py +++ b/one-shot/google-workspace-mcp-login.py @@ -28,8 +28,10 @@ from tools.mcp_oauth_manager import get_manager import httpx # ── Google OAuth settings ────────────────────────────────────────────── -CLIENT_ID = "1090672727072-4buk3522j52pqut02m22rcnto31938jl.apps.googleusercontent.com" -CLIENT_SECRET = "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" +# WARNING: Do NOT hardcode secrets. Use env vars or Hermes config. +CLIENT_ID = os.environ.get("GOOGLE_OAUTH_CLIENT_ID", + "1090672727072-4buk3522j52pqut02m22rcnto31938jl.apps.googleusercontent.com") +CLIENT_SECRET = os.environ.get("GOOGLE_OAUTH_CLIENT_SECRET", "") AUTH_URI = "https://accounts.google.com/o/oauth2/auth" TOKEN_URI = "https://oauth2.googleapis.com/token"