mirror of
https://github.com/Stirling-Tools/Stirling-PDF.git
synced 2026-09-03 05:10:16 +03:00
James Brunton
11ba3814e5
# Description of Changes We don't have any strong reasons to keep the Portal as a separate Vite app, and it needs access to so many things from the Editor that it no longer makes sense to keep them separate. This PR moves the Portal code to have direct access to the Editor code and gets rid of the shared folder.
30 lines
1.7 KiB
Plaintext
30 lines
1.7 KiB
Plaintext
# PostHog project-level key - phc_ prefix keys are public/client-side by design
|
|
# (PostHog client-side tracking embeds them in the browser bundle). Committed
|
|
# intentionally in #6150 so engine/.env has a working default, with real
|
|
# credentials overridden via engine/.env.local.
|
|
engine/.env:generic-api-key:41
|
|
|
|
# MCP test fixtures / harness - no real secrets:
|
|
# - test-only API key constant in an integration test
|
|
# - JDBC URL + throwaway Keycloak creds in the local test compose
|
|
# - placeholder / shell-variable Bearer headers in curl-based validation scripts
|
|
app/proprietary/src/test/java/stirling/software/proprietary/mcp/security/McpApiKeyIntegrationTest.java:generic-api-key:40
|
|
testing/compose/docker-compose-keycloak-mcp.yml:generic-api-key:25
|
|
testing/compose/validate-mcp-apikey.sh:curl-auth-header:73
|
|
testing/compose/validate-mcp-test.sh:curl-auth-header:92
|
|
testing/compose/validate-mcp-test.sh:curl-auth-header:116
|
|
|
|
# Storybook example showing curl with a fake Bearer token placeholder (sk_live_a3f8...).
|
|
frontend/editor/src/proprietary/ui/CodeBlock.stories.tsx:curl-auth-header:5
|
|
|
|
# Truncated placeholder API key in portal docs example (sk_live_8f2c...e10) - not a real secret.
|
|
frontend/editor/src/portal/components/docs/GettingStartedSection.tsx:generic-api-key:30
|
|
|
|
# False positive: generic-api-key matches the Java type name "X509Certificate"
|
|
# in a method signature (CreateSignatureBase.resolveSignatureAlgorithm) - not a secret.
|
|
app/core/src/main/java/org/apache/pdfbox/examples/signature/CreateSignatureBase.java:generic-api-key:224
|
|
|
|
# Supabase publishable key (public by design, RLS-protected) used as a CI fallback
|
|
# default in the tauri-build workflow when the GitHub secret is unset - not a real secret.
|
|
.github/workflows/tauri-build.yml:generic-api-key:402
|