Enforce a server secret in production

1 files changed, 6 insertions, 1 deletions

diff --git a/halfnarp2.py b/halfnarp2.py
index a6f4d1c..f13f967 100755
--- a/halfnarp2.py
+++ b/halfnarp2.py
@@ -268,7 +268,12 @@ if __name__ == "__main__":
     )
     app.config["SQLALCHEMY_TRACK_MODIFICATIONS"] = False
     app.config["SERVER_NAME"] = config.get("server-name", "localhost")
-    app.config["SECRET_KEY"] = "<YOUR SERVER SECRET HERE>"
+    app.config["SECRET_KEY"] = config.get("server-secret", "<YOUR SERVER SECRET HERE>")
+
+    if app.config["SECRET_KEY"] == "<YOUR SERVER SECRET HERE>":
+        print ("You must set the server-secret in your config.json")
+        sys.exit(1)
+
     app.jinja_env.trim_blocks = True
     app.jinja_env.lstrip_blocks = True
     CORS()