Hardcoded JWT Secret in serverless.yml

[beetle-ai]

ISSUE_NUMBER: GH-38

Description

The JWT_SECRET is hardcoded in the serverless.yml file, which is a security risk.
File: repositories/QuestionBankapi/serverless.yml
Line: 17
Severity: critical

Current Behavior

The JWT secret is exposed in the configuration file.

Expected Behavior

The JWT secret should be stored in a secure environment variable or a secrets management system.

Suggested Fix

Replace the hardcoded secret with an environment variable lookup.

Code Context

JWT_SECRET: flskdjflksdajffds

Additional Notes

This is a critical security vulnerability that could allow attackers to forge JWT tokens.

[beetle-ai]

🚀 Analyze and fix this issue with codetector-ai.

Start now →