Remove hardcoded Google OAuth client_secret from google-workspace-mcp-login.py
This commit is contained in:
@@ -28,8 +28,10 @@ from tools.mcp_oauth_manager import get_manager
|
|||||||
import httpx
|
import httpx
|
||||||
|
|
||||||
# ── Google OAuth settings ──────────────────────────────────────────────
|
# ── Google OAuth settings ──────────────────────────────────────────────
|
||||||
CLIENT_ID = "1090672727072-4buk3522j52pqut02m22rcnto31938jl.apps.googleusercontent.com"
|
# WARNING: Do NOT hardcode secrets. Use env vars or Hermes config.
|
||||||
CLIENT_SECRET = "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"
|
CLIENT_ID = os.environ.get("GOOGLE_OAUTH_CLIENT_ID",
|
||||||
|
"1090672727072-4buk3522j52pqut02m22rcnto31938jl.apps.googleusercontent.com")
|
||||||
|
CLIENT_SECRET = os.environ.get("GOOGLE_OAUTH_CLIENT_SECRET", "")
|
||||||
AUTH_URI = "https://accounts.google.com/o/oauth2/auth"
|
AUTH_URI = "https://accounts.google.com/o/oauth2/auth"
|
||||||
TOKEN_URI = "https://oauth2.googleapis.com/token"
|
TOKEN_URI = "https://oauth2.googleapis.com/token"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user