import{_ as t,c as s,o as r,a6 as i}from"./chunks/framework.CHl2ywxc.js";const u=JSON.parse('{"title":"Security Best Practices","description":"","frontmatter":{},"headers":[],"relativePath":"troubleshooting/security-best-practices.md","filePath":"troubleshooting/security-best-practices.md","lastUpdated":1755281500000}'),c={name:"troubleshooting/security-best-practices.md"};function o(a,e,n,l,d,p){return r(),s("div",null,e[0]||(e[0]=[i('<h1 id="security-best-practices" tabindex="-1">Security Best Practices <a class="header-anchor" href="#security-best-practices" aria-label="Permalink to "Security Best Practices""></a></h1><ul><li>Store secrets in environment or platform secret stores; avoid plaintext in config</li><li>Set <code>TOKEN_ENC_KEY</code> in production and rotate periodically</li><li>Use minimal OAuth scopes and avoid long-lived tokens when possible</li><li>Prefer <code>LOG_FORMAT=json</code> and sanitize logs; <code>SecretManager.redact</code> prevents secret leakage in config logs</li><li>Enforce <code>https</code> at the edge and set <code>MASTER_BASE_URL=https://...</code> to ensure secure redirects</li></ul>',2)]))}const h=t(c,[["render",o]]);export{u as __pageData,h as default};