Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice

24d29e127cce526d8f991efee331cb54a9c12f86 · 2026-07-16 09:59:11 -0700 · Steve Abrams

Files touched

M migrate_global_to_custom.js

Diff

commit 24d29e127cce526d8f991efee331cb54a9c12f86
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Jul 16 09:59:11 2026 -0700

    Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice
---
 migrate_global_to_custom.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/migrate_global_to_custom.js b/migrate_global_to_custom.js
index 5a8dfdf..8eb41f9 100644
--- a/migrate_global_to_custom.js
+++ b/migrate_global_to_custom.js
@@ -26,7 +26,7 @@
 
 const https = require('https');
 const STORE = 'designer-laboratory-sandbox.myshopify.com';
-const TOKEN = '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';
+const TOKEN = (process.env.SHOPIFY_ADMIN_TOKEN || '');
 
 function gql(body) {
   return new Promise((resolve, reject) => {

← 2c41f83 chore: macstudio3 migration — reconcile from mac2 + repoint · back to Letsbegin · (newest)