Avoid sensitive terms in compiled source #12190

Author: PowerKiKi

bin/generate-client-configuration.php

@@ -14,11 +14,13 @@
 
 $clientConfig = array_intersect_key($config, array_flip($clientKeys));
 $clientConfig['log']['url'] = $config['log']['url'];
-$clientConfig['signedQueries']['key'] = $config['signedQueries']['keys'][0] ?? '';
+$signedQueriesKey = $config['signedQueries']['keys'][0] ?? '';
 
 $json = json_encode($clientConfig, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+$signedQueriesKey = json_encode($signedQueriesKey, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
 $code = <<<STRING
     export const localConfig = $json as const;
+    export const signedQueriesKey = $signedQueriesKey as const;
     STRING;
 
 file_put_contents('client/app/shared/generated-config.ts', $code);

client/app/app.config.ts

@@ -30,7 +30,7 @@ import {
     ShowOnDirtyErrorStateMatcher,
 } from '@angular/material/core';
 import {LoggerExtraService} from './shared/services/logger-extra.service';
-import {localConfig} from './shared/generated-config';
+import {localConfig, signedQueriesKey} from './shared/generated-config';
 import localeFRCH from '@angular/common/locales/fr-CH';
 import {provideRouter, withInMemoryScrolling, withRouterConfig} from '@angular/router';
 import {MAT_TABS_CONFIG, MatTabsConfig} from '@angular/material/tabs';
@@ -100,7 +100,7 @@ export const appConfig: ApplicationConfig = {
         },
         apolloOptionsProvider,
         {provide: MAT_TOOLTIP_DEFAULT_OPTIONS, useValue: matTooltipCustomConfig},
-        provideHttpClient(withInterceptors([activityInterceptor, graphqlQuerySigner(localConfig.signedQueries.key)])),
+        provideHttpClient(withInterceptors([activityInterceptor, graphqlQuerySigner(signedQueriesKey)])),
         provideRouter(
             routes,
             withRouterConfig({