yamen/full_encoach_platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(security): redact live OpenAI key, point to ir.config_parameter storage

Browse Source 
The previous local-only edit appended a working sk-proj-* key in plain text.
Replaced with a placeholder referencing the Odoo `encoach_ai.openai_api_key`
config parameter (the actual storage). The visible key should be rotated.

Made-with: Cursor
This commit is contained in:
Yamen Ahmad
2026-04-28 00:39:37 +04:00
parent 3b62075d7e
commit 744cede1a3
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/06-All-Credentials-Inventory.md
View File

@@ -188,3 +188,6 @@
4. **The `BACKEND_JWT` and `JWT_TEST_TOKEN` are identical** — the same test JWT is used for frontend-to-backend auth and for testing.
5. **The `GCS_SERVICE_ACCOUNT` in encoach-cms contains a full GCP service account private key** encoded in base64.
6. **The `FIREBASE_CLIENT_EMAIL` references `tiago.ribeiro@ecrop.dev`** — a developer's email from the previous development team.
openai_key: <REDACTED — stored in Odoo `ir.config_parameter` key `encoach_ai.openai_api_key`. Rotate at https://platform.openai.com/account/api-keys if exposed.>