Console: - Rewrite auth from JWT decoding to Better Auth useSession() - Add auth-client.ts with createAuthClient - Remove elydora_token localStorage, dead auth API functions - Fix login/register pages to use signIn.email/signUp.email Server: - Upgrade better-auth ^1.2.0 → ^1.5.5 - CORS: enforce allowlist on all environments - Sync auth service and middleware with backend SDKs: - Deprecate login/register in Node, Python, Go SDKs - Update READMEs to show direct token initialization Config: - Sanitize .env with dev-only placeholder values - Update helm chart and install scripts Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
16 lines
568 B
YAML
16 lines
568 B
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: elydora-secret
|
|
namespace: {{ include "elydora.namespace" . }}
|
|
labels:
|
|
{{- include "elydora.labels" . | nindent 4 }}
|
|
type: Opaque
|
|
stringData:
|
|
DATABASE_URL: {{ include "elydora.databaseUrl" . | quote }}
|
|
BETTER_AUTH_SECRET: {{ .Values.api.betterAuthSecret | quote }}
|
|
ELYDORA_SIGNING_KEY: {{ .Values.api.signingKey | quote }}
|
|
POSTGRES_PASSWORD: {{ .Values.postgres.password | quote }}
|
|
MINIO_SECRET_KEY: {{ .Values.minio.rootPassword | quote }}
|
|
MINIO_ROOT_PASSWORD: {{ .Values.minio.rootPassword | quote }}
|