The svc.plus review password and the two bridge tokens were committed in plaintext across the manual case / API test docs. Replace every value with a `.env` / secret-store reference and add a tracked .env.example template. Harden .gitignore (.env.*, *.local.env, secrets.env) while keeping !.env.example. Note: git history was rewritten separately to purge the leaked values; the credentials must be rotated regardless. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
16 lines
599 B
Plaintext
16 lines
599 B
Plaintext
# 评审 / 测试凭据模板 —— 复制为本地 `.env`(已被 .gitignore 忽略)后填入真实值。
|
||
# 切勿把真实密码 / Token 写进任何被 git 跟踪的文件、日志或截图。
|
||
# 用法:set -a; source .env; set +a
|
||
|
||
# --- svc.plus 只读评审账号 ---
|
||
REVIEW_ACCOUNT_BASE_URL=https://accounts.svc.plus
|
||
REVIEW_ACCOUNT_LOGIN_EMAIL=review@svc.plus
|
||
REVIEW_ACCOUNT_LOGIN_PASSWORD=
|
||
|
||
# --- xworkmate-bridge ---
|
||
BRIDGE_SERVER_URL=https://xworkmate-bridge.svc.plus
|
||
# 组合 1:标准 bridge token
|
||
BRIDGE_AUTH_TOKEN=
|
||
# 组合 2:评审专用 bridge token
|
||
BRIDGE_REVIEW_AUTH_TOKEN=
|