From 83d32a735fbd7b46896400fdee3586370e69a987 Mon Sep 17 00:00:00 2001 From: orbisai0security Date: Wed, 24 Jun 2026 16:17:30 +0000 Subject: [PATCH] fix: V-002 security vulnerability Automated security fix generated by OrbisAI Security --- docs_src/security/tutorial004_an_py310.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs_src/security/tutorial004_an_py310.py b/docs_src/security/tutorial004_an_py310.py index 685cb034e..7c7d6d1c6 100644 --- a/docs_src/security/tutorial004_an_py310.py +++ b/docs_src/security/tutorial004_an_py310.py @@ -1,3 +1,4 @@ +import os from datetime import datetime, timedelta, timezone from typing import Annotated @@ -10,7 +11,8 @@ from pydantic import BaseModel # to get a string like this run: # openssl rand -hex 32 -SECRET_KEY = "09d25e094faa6ca2556c818166b7a9563b93f7099f6f0f4caa6cf63b88e8d3e7" +# then set it as an environment variable: export SECRET_KEY="your-generated-key" +SECRET_KEY = os.environ.get("SECRET_KEY", "09d25e094faa6ca2556c818166b7a9563b93f7099f6f0f4caa6cf63b88e8d3e7") ALGORITHM = "HS256" ACCESS_TOKEN_EXPIRE_MINUTES = 30