Remove hardcoded Google OAuth client_secret from google-workspace-mcp-login.py

2026-08-05 12:33:51 +02:00
parent 6b0f52b577
commit 67ec4375b3
1 changed files with 4 additions and 2 deletions
@@ -28,8 +28,10 @@ from tools.mcp_oauth_manager import get_manager
 import httpx

 # ── Google OAuth settings ──────────────────────────────────────────────
-CLIENT_ID = "1090672727072-4buk3522j52pqut02m22rcnto31938jl.apps.googleusercontent.com"
-CLIENT_SECRET = "CLIENT_SECRET_REMOVED"
+# WARNING: Do NOT hardcode secrets. Use env vars or Hermes config.
+CLIENT_ID = os.environ.get("GOOGLE_OAUTH_CLIENT_ID",
+    "1090672727072-4buk3522j52pqut02m22rcnto31938jl.apps.googleusercontent.com")
+CLIENT_SECRET = os.environ.get("GOOGLE_OAUTH_CLIENT_SECRET", "")
 AUTH_URI = "https://accounts.google.com/o/oauth2/auth"
 TOKEN_URI = "https://oauth2.googleapis.com/token"