From 045077143ff1545f0816dc6d366c784d2cf88128 Mon Sep 17 00:00:00 2001 From: devlikepro Date: Wed, 15 Oct 2025 14:51:51 +0700 Subject: [PATCH] [core] no warning about plain key --- entrypoint.sh | 5 ----- src/core/auth/ApiKeyAuthFactory.ts | 13 ------------- 2 files changed, 18 deletions(-) diff --git a/entrypoint.sh b/entrypoint.sh index 09e75103..c27bdac1 100755 --- a/entrypoint.sh +++ b/entrypoint.sh @@ -41,11 +41,6 @@ if [ -n "$key" ]; then # If already hashed, use it as is export WAHA_API_KEY="$key" else - # Display warning about using plain text API key - echo "⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️" - echo "WARNING: Plain text API key detected. Converting to hashed format for security." - echo "For better security, use WAHA_API_KEY=sha512:{SHA512_HASH_FOR_YOUR_API_KEY}" - echo "⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️" # Hash the key using sha512sum HASHED_KEY=$(echo -n "$key" | sha512sum | awk '{print $1}') export WAHA_API_KEY="sha512:$HASHED_KEY" diff --git a/src/core/auth/ApiKeyAuthFactory.ts b/src/core/auth/ApiKeyAuthFactory.ts index 719fad00..fea0ee43 100644 --- a/src/core/auth/ApiKeyAuthFactory.ts +++ b/src/core/auth/ApiKeyAuthFactory.ts @@ -36,18 +36,5 @@ export function ApiKeyAuthFactory( } // Fallback to plain text - setTimeout(() => { - logger.warn('⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️'); - logger.warn( - 'WARNING: Plain text API key detected. This is a security risk.', - ); - logger.warn( - 'Your API key can be exposed in environment variables or process lists.', - ); - logger.warn( - 'For better security, use WAHA_API_KEY=sha512:{SHA512_HASH_FOR_YOUR_API_KEY}', - ); - logger.warn('⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️⚠️'); - }, 2000); return new PlainApiKeyAuth(apiKey); }