xworkmate-app/.env.example
Haitao Pan 7fa9018d53 security(docs): remove plaintext review credentials, inject from .env
The svc.plus review password and the two bridge tokens were committed in
plaintext across the manual case / API test docs. Replace every value
with a `.env` / secret-store reference and add a tracked .env.example
template. Harden .gitignore (.env.*, *.local.env, secrets.env) while
keeping !.env.example.

Note: git history was rewritten separately to purge the leaked values;
the credentials must be rotated regardless.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-29 10:57:31 +08:00

16 lines
599 B
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 评审 / 测试凭据模板 —— 复制为本地 `.env`(已被 .gitignore 忽略)后填入真实值。
# 切勿把真实密码 / Token 写进任何被 git 跟踪的文件、日志或截图。
# 用法set -a; source .env; set +a
# --- svc.plus 只读评审账号 ---
REVIEW_ACCOUNT_BASE_URL=https://accounts.svc.plus
REVIEW_ACCOUNT_LOGIN_EMAIL=review@svc.plus
REVIEW_ACCOUNT_LOGIN_PASSWORD=
# --- xworkmate-bridge ---
BRIDGE_SERVER_URL=https://xworkmate-bridge.svc.plus
# 组合 1标准 bridge token
BRIDGE_AUTH_TOKEN=
# 组合 2评审专用 bridge token
BRIDGE_REVIEW_AUTH_TOKEN=