fix: Restrict JWT key file permissions to 0600

This commit is contained in:
vgoer 2026-08-24 09:30:22 +00:00
parent ab893706da
commit 29687987b2

View file

@ -145,7 +145,7 @@ const generateKeys = () => {
// Write keys config
try {
fs.writeFileSync(keysFile, JSON.stringify(keys, null, 2));
fs.writeFileSync(keysFile, JSON.stringify(keys, null, 2), { mode: 0o600 });
} catch (err) {
logger.error(`Could not write JWT key pair to config file: ${keysFile}: ${err.message}`);
process.exit(1);