wasrusgen/zov-tech
1
0
Fork 0
mirror of https://github.com/wasrusgen/zov-tech.git synced 2026-06-03 13:24:48 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

security: read BOT_TOKEN from env, remove hardcoded token

Browse Source 
- token was hardcoded in test files (now revoked)
- tests now read BOT_TOKEN from environment
This commit is contained in:
wasrusgen 2026-06-03 10:26:03 +03:00
parent 47bb4ebabc
commit bf0563d59e
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
tests/test_manager.py
View File

@ -1,3 +1,4 @@
import os
"""
Тест кабинета менеджера — полная проверка всех API-модулей
с реальной Telegram-аутентификацией.
@ -16,7 +17,7 @@ import urllib.error
from typing import Any
# ─── Конфигурация ───────────────────────────────────────────────────────────
BOT_TOKEN = "8281503057:AAEXmOepY8quH8E3RqOjFbgn7owV1ngnbGA"
BOT_TOKEN = os.getenv("BOT_TOKEN", "")
ADMIN_TG_ID = 5937498515
ADMIN_USERNAME = "wasrusgen"
ADMIN_NAME = "Руслан"

2
tests/ui_smoke.js
View File

@ -17,7 +17,7 @@ const { spawn } = require("child_process");
const path = require("path");
// ─── Конфигурация ────────────────────────────────────────────────────────────
const BOT_TOKEN = "8281503057:AAEXmOepY8quH8E3RqOjFbgn7owV1ngnbGA";
const BOT_TOKEN = process.env.BOT_TOKEN || "";
const ADMIN_TG_ID = 5937498515;
const LOCAL_PORT = 8787;
const PROJECT_ROOT = path.resolve(__dirname, ".."); // без пробелов в аргументах