From b897986c1ff8d8ff6c0500117c382f88e70bdd1d Mon Sep 17 00:00:00 2001
From: Yasien Mac Mini <yasienmeth@gmail.com>
Date: Wed, 4 Feb 2026 15:39:47 +0200
Subject: [PATCH] BUG: Fix hardcoded supertoken api key

---
 .DS_Store                                     | Bin 8196 -> 10244 bytes
 docker-compose.yml                            |  31 ------------------
 mih_api_hub/__init__.py                       |  28 ----------------
 mih_api_hub/main.py                           |   7 +++-
 mih_ui/.gitignore                             |   2 ++
 mih_ui/lib/main_dev.dart                      |   2 ++
 mih_ui/lib/main_prod.dart                     |   2 ++
 .../package_tools/mih_register.dart           |   3 +-
 .../mih_authentication_services.dart          |   3 +-
 mih_ui/pubspec.lock                           |   8 +++++
 mih_ui/pubspec.yaml                           |   2 ++
 11 files changed, 26 insertions(+), 62 deletions(-)

diff --git a/.DS_Store b/.DS_Store
index e07f5f73ca0afb8cb8599399826546c90f05d453..03fe24efd63baf02bcbb1f3f70c3f49648b43260 100644
GIT binary patch
literal 10244
zcmeGhTWl0n^qgr6GjwQ&TBTqoE);{3Qrc2z5ir}AQUt2q);_GRyE|h$FgvsE>~4YD
zxH0iZ6l46*i1_;PLDYl@K7KS&@$un@qKU?+F=~7yJ`#UaqMmzaww>J;;|DQn<|cE`
zz2|Z7x#w~3of!bYuB_Gq5CQ;^9tIVess#$8vu9orJWPlnl029bEs=zsOwHpA5P<~(
z3j`JjED%^Au)x2?0(54xB38OEr~?ZG76>dbYXP=Dgy>-~?7_SX`PM-de+3{|PH0}J
zt*{2ckO#va%)5{%RL~VA=!&BEih-^;;X@u@*n@c&y5fM|%LjThqxXh_e0CZ?#MuGE
zE)43x0)YkQTOdTJa%h4HFd*Z9f3FJvey^XFw0nBurX44oSkwOL@o?`OoyBzRFX^et
zxo-p2;~^4-3Ys?uI#`hN&n*3<y;e;1&%M{28aVRKDK@uHK55U*zA%S>{v}8ABo2%D
z{0=0*1`Tw-4gh6O&FApz(bI7(yz@BMqhuVvE@$WR>*MW}HKc`2+Uz5nq+vbRD+wvW
zIfQ9~1CRu>&$JVsA84yXm9%X7gBP|WSVTMqOhOd0V3<y>+vP2b#8al>WSW~lLZPg@
zV$otzT2d)5Rfk7L$K>&-Qj;_Ess2>Pur23WJ?#*TD%H-UJ=K@6t*g^IqYo!+Gn=%W
zsIn{(GZR@emeD&+Gh!Un30LhT(za<{Z94`VW^^Q@@6RyWJkrRRW2ZCSe6XmZWF37#
zr?HHj-a{igBL+>$1Z(+{<|>q)sak%~noHKVwr>mf_U*prbhWaq=Db>29y2uE${05p
zdU|Ne&@z*wF(;v0nqf^0=M2Y)oBE&?OX|z8QIbwq*R5E2VZExJjddg&H*U@vnFC6L
zDDpW%t5kVhBjtA68k<E^PKY!P&3^GJRlSZ;y3;z<nkR7SI#nKYXbnotV{F<W%Y*w2
zOH&-C0*P*Hlhq+J7S~NhliYbaw#e#m&b7aCm51D3E2|^)T`fsVbUa*Vm#W^trri~D
zGW{vtB9-3s=DvbxW6oqOt@lq^dfLP8BrJC+;h9jcW@KzmBx~%URgALXIyH^2VP)Nl
zYBiz`iORboxyZ0`Mut2@ej$)`#D?%j*Dnp>bzb8YEzeur&{9LV*~Qbru0kvHz%ICv
z!g?C+g8ShZJO{7CDR>_~fp6dk_yrLcp@d7Y5^HfKuE9p!gzeaYTd)iJ@fsY!2#(_<
z8n_o7+>Zxw8gIed@eaHb@4~})A0EYr@ezC!pTgt#9G<|F_%gnUZ{gec9)6Br;FtIn
z{(!&YZ+J$i5S9yd!U|!v&?u}InuK<tL%2-XD(n&Zg%Kep>=kSw<?1hZHx9VoTaO2X
z1Jo!@x0IW1!ZQn}Tm6+g`gY2@{xj+JVU?R;=U=cqbn&_kZ5`V?X9LlV+(NMWQ-H^P
zQMT~7=W$UIv!~rmlrJh|X=zFhQNrl^MV7b9VwZchyhfyiQ7YW-TKQ6uQbk$hb{p%P
zL`qIY;9a?;expPwsFb<g#`<<iRM72QCU27{8I^LktIA<XQh;~ryX$*JN+?A<SCRf9
zd=6j3k8p+}y$a96I$Vp*6yKNQ4%|Z#&f<FrZ@?(VFpe4~(ZUqoOtF3o&fu+>$J_7_
z#rk2q8}Gpf@CZJL58>nZ1jYL?e43*Dd3*t1!dLM%JcVy~asM$z{kQmCNhI$sj%56~
zG?H_Xv}M}X1mRiqSI`m7E(jLvFFt;N9m5a#jvpUqe9G~%0bVF%!v}@KXR%l*ULT>;
z#obQ2V(IHxZ_u{Qc%dDOUrT3BRH^N@txU|Ios0|6PERc3!xR|yRF|E#G>6MZT!JWx
zQdFs%o^ET|(im#n)H2f;n%>gdOzn-EXJ#bv{Duu%2crATq-Ebh+Ec+ohA(ydv-Kfr
z`BqeXL0HS!d{qDCz<ly#;c`&KF?UH>n4|boz&B8ze2G^i7=T{#Ko9ID*hB}vR^pv!
zNkhMPM99!Zf?X+^=+WS&Vt#&^@bi~*eg`roe9SHj^7(xJ;y>>571Pt3nwg(Bw=ti$
zv^H;A$mvXZDra^2okW~nc(Kd5;4IDW@W+&;!=HW6Z-YMioVypI7dyLn>=IXVVo(JZ
z2rLj-;G9{Y%pECINwD|q|Nqa~e8E701p*8F`z(OvJ&~R+(yMR}E>)3zYY)+LBR#Az
zzPt;$2vz)ZJVE|Bo;vJv{3Y}--ol3f)((5PybB3K<sbhU5WN5Yz0YmI`~Uy;{r^u;
C#lkQE

delta 96
zcmZn(XmOBWU|?W$DortDU;r^WfEYvza8FDWo2aMAD7P_SH$S7?W*&h%jGGlD<k<w7
kfzm)A!3`u_K`J*UerKM{uM)_?2+_|lIi6?EVq0lu015FBVgLXD

diff --git a/docker-compose.yml b/docker-compose.yml
index 5bc17734..a7c0de6f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,37 +4,6 @@ networks:
     driver: bridge
 #============== MIH Containers ====================================================================
 services:
-  #============== Nginx Proxy Server Old ====================================================================
-  # nginx:
-  #   container_name: nginx
-  #   restart: unless-stopped
-  #   image: nginx
-  #   ports:
-  #     - 80:80
-  #     - 443:443
-  #   volumes:
-  #     - ./nginx/nginx.conf:/etc/nginx/nginx.conf
-  #     - certbotConf:/etc/letsencrypt
-  #     - certbotChall:/var/www/certbot
-  #   depends_on:
-  #     - mih-ux
-  #   networks:
-  #     - mih-network
-  #   profiles: [ 'prod' ]
-  #============== Cert Bot Old ==================================================================== 
-  # certbot:
-  #   image: certbot/certbot
-  #   container_name: certbot
-  #   volumes:
-  #     - certbotConf:/etc/letsencrypt
-  #     - certbotChall:/var/www/certbot
-  #   #command: certonly --test-cert --webroot -w /var/www/certbot --force-renewal --email yasienmeth@gmail.com -d mzansi-innovation-hub.co.za -d www.mzansi-innovation-hub.co.za --agree-tos
-  #   command: certonly --webroot -w /var/www/certbot --force-renewal --email ${CERTBOT_EMAIL} -d ${CERTBOT_APP_DOMAIN} -d ${CERTBOT_API_DOMAIN} -d ${CERTBOT_STORAGE_DOMAIN} -d ${CERTBOT_MONITOR_DOMAIN} -d ${CERTBOT_AI_DOMAIN} --agree-tos
-  #   networks:
-  #     - mih-network
-  #   depends_on:
-  #     - nginx
-  #   profiles: [ 'withCert' ]
   #============== Nginx Proxy Manager ====================================================================  
   mih-nginx:
     container_name: mih-nginx
diff --git a/mih_api_hub/__init__.py b/mih_api_hub/__init__.py
index 51d9c310..e69de29b 100644
--- a/mih_api_hub/__init__.py
+++ b/mih_api_hub/__init__.py
@@ -1,28 +0,0 @@
-# from supertokens_python import init, InputAppInfo, SupertokensConfig
-# from supertokens_python.recipe import emailpassword, session, dashboard
-
-# init(
-#     app_info=InputAppInfo(
-#         app_name="MIH_API_HUB",
-#         api_domain="http://localhost:8080/",
-#         website_domain="http://mzansi-innovation-hub.co.za",
-#         api_base_path="/auth",
-#         website_base_path="/auth"
-#     ),
-#     supertokens_config=SupertokensConfig(
-#         # https://try.supertokens.com is for demo purposes. Replace this with the address of your core instance (sign up on supertokens.com), or self host a core.
-#         connection_uri="supertokens:3567/",
-#         api_key="leatucczyixqwkqqdrhayiwzeofkltds"
-#     ),
-#     framework='fastapi',
-#     recipe_list=[
-#         # SuperTokens.init(),
-#         session.init(), # initializes session features
-#         emailpassword.init(),
-#         dashboard.init(admins=[
-#             "yasienmeth@gmail.com",
-#           ],
-#         )
-#     ],
-#     mode='wsgi' # use wsgi instead of asgi if you are running using gunicorn
-# )
\ No newline at end of file
diff --git a/mih_api_hub/main.py b/mih_api_hub/main.py
index bb107d42..c83e79bc 100644
--- a/mih_api_hub/main.py
+++ b/mih_api_hub/main.py
@@ -34,6 +34,11 @@ from supertokens_python.recipe.session.framework.fastapi import verify_session
 from supertokens_python.recipe.emailverification import EmailVerificationClaim
 from supertokens_python.recipe.session import SessionContainer
 
+import os
+from dotenv import load_dotenv
+
+load_dotenv()
+st_api_key = os.getenv("SUPERTOKENS_API_KEY")
 origins = [
     "http://localhost",
     "http://localhost:80",
@@ -55,7 +60,7 @@ init(
     supertokens_config=SupertokensConfig(
         # https://try.supertokens.com is for demo purposes. Replace this with the address of your core instance (sign up on supertokens.com), or self host a core.
         connection_uri="http://mih-supertokens:3567/",
-        api_key="leatucczyixqwkqqdrhayiwzeofkltds"
+        api_key=st_api_key
     ),
     framework='fastapi',
     recipe_list=[
diff --git a/mih_ui/.gitignore b/mih_ui/.gitignore
index 9fc6e4ac..5af64235 100644
--- a/mih_ui/.gitignore
+++ b/mih_ui/.gitignore
@@ -1,3 +1,5 @@
+.env
+
 # Miscellaneous
 *.class
 *.log
diff --git a/mih_ui/lib/main_dev.dart b/mih_ui/lib/main_dev.dart
index 437c62b9..e1c394dd 100644
--- a/mih_ui/lib/main_dev.dart
+++ b/mih_ui/lib/main_dev.dart
@@ -2,6 +2,7 @@ import 'dart:io';
 
 import 'package:flutter/foundation.dart';
 import 'package:flutter/material.dart';
+import 'package:flutter_dotenv/flutter_dotenv.dart';
 import 'package:flutter_native_splash/flutter_native_splash.dart';
 import 'package:flutter_web_plugins/url_strategy.dart'
     if (dart.library.html) 'package:flutter_web_plugins/url_strategy.dart';
@@ -42,6 +43,7 @@ void main() async {
     debugPrint('APP INSTALLED!');
   });
   final GoRouter appRouter = MihGoRouter().mihRouter;
+  await dotenv.load(fileName: ".env");
   FlutterNativeSplash.remove();
   runApp(MzansiInnovationHub(
     router: appRouter,
diff --git a/mih_ui/lib/main_prod.dart b/mih_ui/lib/main_prod.dart
index c8ce2935..b7026b50 100644
--- a/mih_ui/lib/main_prod.dart
+++ b/mih_ui/lib/main_prod.dart
@@ -2,6 +2,7 @@ import 'dart:io';
 
 import 'package:flutter/foundation.dart';
 import 'package:flutter/material.dart';
+import 'package:flutter_dotenv/flutter_dotenv.dart';
 import 'package:flutter_native_splash/flutter_native_splash.dart';
 import 'package:flutter_web_plugins/url_strategy.dart'
     if (dart.library.html) 'package:flutter_web_plugins/url_strategy.dart';
@@ -33,6 +34,7 @@ void main() async {
     debugPrint('APP INSTALLED!');
   });
   final GoRouter appRouter = MihGoRouter().mihRouter;
+  await dotenv.load(fileName: ".env");
   FlutterNativeSplash.remove();
   runApp(MzansiInnovationHub(
     router: appRouter,
diff --git a/mih_ui/lib/mih_packages/mih_authentication/package_tools/mih_register.dart b/mih_ui/lib/mih_packages/mih_authentication/package_tools/mih_register.dart
index ba9ce004..0622cedb 100644
--- a/mih_ui/lib/mih_packages/mih_authentication/package_tools/mih_register.dart
+++ b/mih_ui/lib/mih_packages/mih_authentication/package_tools/mih_register.dart
@@ -2,6 +2,7 @@ import 'dart:convert';
 
 import 'package:flutter/material.dart';
 import 'package:flutter/services.dart';
+import 'package:flutter_dotenv/flutter_dotenv.dart';
 import 'package:mzansi_innovation_hub/main.dart';
 import 'package:mzansi_innovation_hub/mih_package_components/mih_button.dart';
 import 'package:mzansi_innovation_hub/mih_package_components/mih_form.dart';
@@ -107,7 +108,7 @@ class _MihRegisterState extends State<MihRegister> {
               headers: {
                 'Content-type': 'application/json',
                 'Accept': 'application/json',
-                "Authorization": "leatucczyixqwkqqdrhayiwzeofkltds"
+                "Authorization": dotenv.env['SUPERTOKENS_API_KEY'] ?? "",
               },
             );
             //print("response 2: ${response2.statusCode}");
diff --git a/mih_ui/lib/mih_services/mih_authentication_services.dart b/mih_ui/lib/mih_services/mih_authentication_services.dart
index 3b1f6cd7..08b59175 100644
--- a/mih_ui/lib/mih_services/mih_authentication_services.dart
+++ b/mih_ui/lib/mih_services/mih_authentication_services.dart
@@ -1,6 +1,7 @@
 import 'dart:convert';
 
 import 'package:flutter/material.dart';
+import 'package:flutter_dotenv/flutter_dotenv.dart';
 import 'package:go_router/go_router.dart';
 import 'package:mzansi_innovation_hub/main.dart';
 import 'package:mzansi_innovation_hub/mih_package_components/mih_button.dart';
@@ -32,7 +33,7 @@ class MihAuthenticationServices {
       headers: {
         'Content-type': 'application/json',
         'Accept': 'application/json',
-        "Authorization": "leatucczyixqwkqqdrhayiwzeofkltds"
+        "Authorization": dotenv.env['SUPERTOKENS_API_KEY'] ?? "",
       },
     );
     if (response.statusCode == 200) {
diff --git a/mih_ui/pubspec.lock b/mih_ui/pubspec.lock
index 41003e1b..6c3cdb57 100644
--- a/mih_ui/pubspec.lock
+++ b/mih_ui/pubspec.lock
@@ -670,6 +670,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "0.3.0"
+  flutter_dotenv:
+    dependency: "direct main"
+    description:
+      name: flutter_dotenv
+      sha256: d4130c4a43e0b13fefc593bc3961f2cb46e30cb79e253d4a526b1b5d24ae1ce4
+      url: "https://pub.dev"
+    source: hosted
+    version: "6.0.0"
   flutter_launcher_icons:
     dependency: "direct main"
     description:
diff --git a/mih_ui/pubspec.yaml b/mih_ui/pubspec.yaml
index cd20d55a..88e94c22 100644
--- a/mih_ui/pubspec.yaml
+++ b/mih_ui/pubspec.yaml
@@ -12,6 +12,7 @@ dependencies:
     sdk: flutter
   flutter_web_plugins:
     sdk: flutter
+  flutter_dotenv: ^6.0.0
 
   cupertino_icons: ^1.0.8
   font_awesome_flutter: ^10.7.0
@@ -76,6 +77,7 @@ dev_dependencies:
 flutter:
   uses-material-design: true
   assets:
+    - .env
     - lib/mih_package_components/assets/images/
     - lib/mih_package_components/assets/fonts/
     - lib/mih_package_components/assets/images/loyalty_cards/