chore: fix snyk errors

Author: bartstc

server/src/config.ts

@@ -4,7 +4,8 @@ import path from "path";
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
 export const PORT = 3001;
-export const JWT_SECRET = "local-dev-secret-do-not-use-in-production";
+export const JWT_SECRET =
+  process.env.JWT_SECRET ?? "local-dev-secret-do-not-use-in-production";
 export const DB_PATH = path.resolve(__dirname, "db/db.json");
 
 // AIDEV-NOTE: set to false to disable auth on all mutation routes (dev convenience)

src/features/auth/application/auth-store.ts

@@ -1,14 +1,13 @@
 import { createContext, useContext } from "react";
 import { createStore, useStore } from "zustand";
 
+import { AUTH_KEY } from "@/features/auth/models/storage-keys";
 import type { User } from "@/features/auth/models/user";
 import { getUser } from "@/features/auth/providers/get-user";
 import { AUTH_TOKEN_KEY } from "@/lib/http/ky-client";
 
 import { loginUser, type ICredentials } from "../providers/login-user";
 
-const AUTH_KEY = "fake_store_is_authenticated";
-
 // could be also https://www.npmjs.com/package/zustand-persist lib for advanced use cases
 const isLoggedIn = () => localStorage.getItem(AUTH_KEY) === "true";
 

src/features/auth/models/storage-keys.ts

@@ -0,0 +1,2 @@
+// deepcode ignore HardcodedNonCryptoSecret: localStorage key name, not a secret value
+export const AUTH_KEY = "fake_store_is_authenticated";

src/features/authv2/application/AuthProvider.tsx

@@ -4,6 +4,7 @@ import type { PropsWithChildren } from "react";
 import { useEffect } from "react";
 import { fromPromise } from "xstate";
 
+import { AUTH_KEY } from "@/features/auth/models/storage-keys";
 import { getUser } from "@/features/auth/providers/get-user";
 import { loginUser } from "@/features/auth/providers/login-user";
 import { AuthContext } from "@/features/authv2/application/auth-context";
@@ -15,8 +16,6 @@ import {
 import { getRoles } from "@/features/authv2/providers/get-roles";
 import { sleep } from "@/lib/sleep";
 
-const AUTH_KEY = "fake_store_is_authenticated";
-
 export const AuthProvider = ({ children }: PropsWithChildren) => {
   const checkAuthStatus = () => {
     return Promise.resolve(localStorage.getItem(AUTH_KEY) === "true");

src/features/authv2/application/storage-machine.ts

@@ -1,6 +1,6 @@
 import { assign, fromPromise, setup } from "xstate";
 
-const AUTH_KEY = "fake_store_is_authenticated";
+import { AUTH_KEY } from "@/features/auth/models/storage-keys";
 
 interface StorageMachineContext {
   isAuthenticated: boolean;