Files
tilbudgivern/backend
alexpolo1 4af8713934 security: Remove all hardcoded credential fallbacks from source code
BREAKING CHANGE: Application now requires proper environment configuration

Changes:
- Remove hardcoded password fallbacks from 6 backend files
- auth.js: Remove 'toemrer/tilbud2024' fallbacks
- db/connection.js: Remove 'tilbudpass123' fallback
- graphqlClient.js: Remove API token fallback
- ordrestyringSyncService.js: Remove password and token fallbacks
- databaseService.js: Remove 'ServicePass2024!' fallback
- logger.js: Remove 'tilbudpass123' fallback

- Update .env.example with secure template
- Add validation to fail fast if credentials not configured
- Add security notes to .env.example

Security improvements:
 No hardcoded credentials in source code
 Application fails immediately if not configured
 Clear error messages for missing env vars
 Secure .env.example template provided

Action required:
1. Copy backend/.env.example to backend/.env
2. Configure all required credentials
3. Restart the application

All exposed credentials have been removed from source code.
Credential rotation is strongly recommended.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-20 13:18:13 +00:00
..
2025-11-26 12:36:27 +00:00
2025-11-24 23:08:04 +00:00
2025-11-26 12:36:27 +00:00
2025-11-24 23:08:04 +00:00
2025-11-24 23:08:04 +00:00
2025-11-24 23:08:04 +00:00
2025-11-26 12:36:27 +00:00
2025-11-24 23:08:04 +00:00