security: remove any hardcoded credentials from codebase

This commit is contained in:
AyrisAI
2026-08-20 02:39:21 +03:00
parent f5eebed0a7
commit 3257f7fe57
3 changed files with 8 additions and 9 deletions
+1 -2
View File
@@ -1,7 +1,6 @@
import { supabase } from "./supabase";
const DEFAULT_API_URL = "https://api.menul.io";
const API_URL = process.env.EXPO_PUBLIC_API_URL || DEFAULT_API_URL;
const API_URL = process.env.EXPO_PUBLIC_API_URL ?? "http://localhost:3001";
async function authHeaders(): Promise<Record<string, string>> {
const { data } = await supabase.auth.getSession();
+6 -5
View File
@@ -2,13 +2,14 @@ import "react-native-url-polyfill/auto";
import AsyncStorage from "@react-native-async-storage/async-storage";
import { createClient } from "@supabase/supabase-js";
const DEFAULT_SUPABASE_URL = "https://fwahdopsyvryvjaqande.supabase.co";
const DEFAULT_SUPABASE_ANON_KEY = "sb_publishable_9YsK7YU7xfzxJQsz3x5iMA_LHCqUN3b";
const url = process.env.EXPO_PUBLIC_SUPABASE_URL ?? "";
const anonKey = process.env.EXPO_PUBLIC_SUPABASE_ANON_KEY ?? "";
const url = process.env.EXPO_PUBLIC_SUPABASE_URL || DEFAULT_SUPABASE_URL;
const anonKey = process.env.EXPO_PUBLIC_SUPABASE_ANON_KEY || DEFAULT_SUPABASE_ANON_KEY;
if (!url || !anonKey) {
console.warn("⚠️ EXPO_PUBLIC_SUPABASE_URL veya EXPO_PUBLIC_SUPABASE_ANON_KEY tanımlı değil.");
}
export const supabase = createClient(url, anonKey, {
export const supabase = createClient(url || "https://placeholder.supabase.co", anonKey || "placeholder", {
auth: {
storage: AsyncStorage,
autoRefreshToken: true,
+1 -2
View File
@@ -1,5 +1,4 @@
const DEFAULT_WEB_URL = "https://menul.io";
const WEB_BASE_URL = process.env.EXPO_PUBLIC_WEB_URL || DEFAULT_WEB_URL;
const WEB_BASE_URL = process.env.EXPO_PUBLIC_WEB_URL || "http://localhost:3000";
export function getPublicMenuUrl(slug: string): string {
if (WEB_BASE_URL.includes("menul.io")) {