refactor(config): enforce runtime auth secret policy

2026-03-30 23:40:00 +02:00
parent 7bcc831b5c
commit a7362f17bd
8 changed files with 181 additions and 8 deletions
@@ -6,6 +6,9 @@ import NextAuth, { type NextAuthConfig } from "next-auth";
 import Credentials from "next-auth/providers/credentials";
 import { verify } from "@node-rs/argon2";
 import { z } from "zod";
+import { assertSecureRuntimeEnv } from "./runtime-env";
+
+assertSecureRuntimeEnv();

 const LoginSchema = z.object({
  email: z.string().email(),