Security Bug
RAraghavarora opened this issue · comments
I'm submitting a ...
- bug report
- feature request
Description :
Official Firebase and Oauth credentials are not added on gitignore and are openly availble on github.
On testing the website locally, firebase credentials of main website are being used.
Current behaviour:
ServiceAccountkey.json contains the official Firebase credentials, and even on local development, master firebase is referred to.
Expected behaviour:
ServiceAccountkey.json should be added to gitignore. Locally, new firebase credentials should be created and new ServiceAccountkey.json should be created.
** Screenshot:**
Would you like to work on the issue?
Yes
When we register a new account locally, on verifying email, main website opens up.
I wish to add the ServiceAccountkey.json to gitignore, and add the same to documentation to allow people to set up their own firebase credentials or possibly use python decouple for the same.