Alexander Whitestone
|
1156875cb5
|
fix(gateway): reject known-weak placeholder tokens at startup
Forge CI / smoke-and-build (pull_request) Failing after 3m8s
Fixes #318
Cherry-picked concept from ferris fork (f724079).
Problem: Users who copy .env.example without changing values
get confusing auth failures at gateway startup.
Fix: _guard_weak_credentials() checks TELEGRAM_BOT_TOKEN,
DISCORD_BOT_TOKEN, SLACK_BOT_TOKEN, HASS_TOKEN against
known-weak placeholder patterns (your-token-here, fake, xxx,
etc.) and minimum length requirements. Warns at startup.
Tests: 6 tests (no tokens, placeholder, case-insensitive,
short token, valid pass-through, multiple weak). All pass.
|
2026-04-13 16:32:56 -04:00 |
|