move session secret to config

transparencyint · Nov 1, 2012 · b31c2b2 · b31c2b2
1 parent 98a50b9
commit b31c2b2
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/server.js b/server.js
@@ -49,7 +49,7 @@ app.configure(function(){
   app.use(express.session({
     store: sessionStore,
     key: 'cgipsid',
-    secret: 'aabdonie98gsdv79sdjsbv2624zihef',
+    secret: config.sessionSecret,
     cookie: {
       maxAge: 604800000
     }

diff --git a/server/config.js.sample b/server/config.js.sample
@@ -4,13 +4,15 @@ if(process.env['NODE_ENV'] && process.env['NODE_ENV'] === 'production')
     adminPassword: "",
     databaseHost: "127.0.0.1",
     databasePort: "5984",
-    salt: "keyboardcat"
+    salt: "keyboardcat",
+    sessionSecret: "anotherkeyboardcat"
   };
 else
   exports.config = {
     adminName: "",
     adminPassword: "",
     databaseHost: "127.0.0.1",
     databasePort: "5984",
-    salt: "keyboardcat"
+    salt: "keyboardcat",
+    sessionSecret: "anotherkeyboardcat"
   };