dadaloop82
d33b0ca2fe
Block web access to sensitive paths, require API_TOKEN for mutations, encrypt GitHub issue credentials in .env, auto-provision tokens for same-origin clients, and pass api_token in scale relay URLs since EventSource cannot send headers. Co-authored-by: Cursor <cursoragent@cursor.com>
15 lines
406 B
PHP
Executable File
15 lines
406 B
PHP
Executable File
#!/usr/bin/env php
|
|
<?php
|
|
/**
|
|
* Encrypt a GitHub Issues token for storage in .env as GH_ISSUE_TOKEN_ENC.
|
|
*
|
|
* Usage:
|
|
* php scripts/encrypt-gh-token.php 'ghp_xxxx' 'your-secret-key'
|
|
*/
|
|
if ($argc < 3) {
|
|
fwrite(STDERR, "Usage: php scripts/encrypt-gh-token.php <token> <key>\n");
|
|
exit(1);
|
|
}
|
|
require_once __DIR__ . '/../api/lib/github.php';
|
|
echo evershelfEncryptGhToken($argv[1], $argv[2]) . "\n";
|