From ae7ad0073be7f966d99017cd6458d97ad45747d3 Mon Sep 17 00:00:00 2001
From: Falkan <falkan@openclaw.local>
Date: Fri, 20 Mar 2026 01:17:04 -0400
Subject: [PATCH] fix: trim whitespace from PASSWORD_HASH and SESSION_SECRET
 env vars

---
 ..env.swp                                  | Bin 1024 -> 0 bytes
 src/lib/server/authRequest.ts              |   2 +-
 src/routes/admin/api/auth/login/+server.ts |   4 ++--
 3 files changed, 3 insertions(+), 3 deletions(-)
 delete mode 100644 ..env.swp

diff --git a/..env.swp b/..env.swp
deleted file mode 100644
index 3b2116a41b372f4cfc9ac239aa775be43a5f8eef..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1024
zcmYc?$V<%2SFq4CVL$=v&j>Q)<>%!kqKIPWq@*TgCg$lH8e^A+i|VE3mBBfqjL{Gn
M4FP(GKq$I}087jZUjP6A

diff --git a/src/lib/server/authRequest.ts b/src/lib/server/authRequest.ts
index 1a6cd11..4a1bf48 100644
--- a/src/lib/server/authRequest.ts
+++ b/src/lib/server/authRequest.ts
@@ -8,5 +8,5 @@ import { requireAuth } from '$lib/server/auth';
 import type { Request } from '@sveltejs/kit';
 
 export function authRequest(request: Request): boolean {
-  return requireAuth(request, env.SESSION_SECRET ?? '');
+  return requireAuth(request, (env.SESSION_SECRET ?? '').trim());
 }
diff --git a/src/routes/admin/api/auth/login/+server.ts b/src/routes/admin/api/auth/login/+server.ts
index 6d1c73d..509366c 100644
--- a/src/routes/admin/api/auth/login/+server.ts
+++ b/src/routes/admin/api/auth/login/+server.ts
@@ -11,8 +11,8 @@ export const POST: RequestHandler = async ({ request, url }) => {
     return json({ error: 'Password required' }, { status: 400 });
   }
 
-  const passwordHash = env.PASSWORD_HASH ?? '';
-  const sessionSecret = env.SESSION_SECRET ?? '';
+  const passwordHash = (env.PASSWORD_HASH ?? '').trim();
+  const sessionSecret = (env.SESSION_SECRET ?? '').trim();
 
   if (!passwordHash || !sessionSecret) {
     console.warn('[humor-units] WARNING: PASSWORD_HASH or SESSION_SECRET env var not set.');