Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice

884bc9467e2a0a00e01a7eba01042cd163d336d7 · 2026-07-16 09:59:12 -0700 · Steve Abrams

Files touched

M src/stevesTool.ts

Diff

commit 884bc9467e2a0a00e01a7eba01042cd163d336d7
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Jul 16 09:59:12 2026 -0700

    Strip hardcoded Shopify API tokens from source (env-first); no rotation/deploy — response to Shopify exposed-credentials notice
---
 src/stevesTool.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/stevesTool.ts b/src/stevesTool.ts
index 0578536..423c298 100644
--- a/src/stevesTool.ts
+++ b/src/stevesTool.ts
@@ -1,7 +1,7 @@
 import type { PatternSnapshot } from "./schemas.js";
 
 const SHOPIFY_STORE = "designer-laboratory-sandbox.myshopify.com";
-const SHOPIFY_TOKEN = "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";
+const SHOPIFY_TOKEN = (process.env.SHOPIFY_ADMIN_TOKEN || '');
 
 function shopifyApiUrl(endpoint: string): string {
   return `https://${SHOPIFY_STORE}/admin/api/2024-01/${endpoint}`;

← 273d454 gitignore: add backup/scratch file patterns to prevent serve · back to Designer Portfolio Pages · (newest)