fix: do not write access token to env file (#1365)

bigcommerce · Sep 13, 2024 · 896b4d3 · 896b4d3
1 parent 00f72dd
commit 896b4d3
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 6 deletions.
diff --git a/.changeset/small-sheep-divide.md b/.changeset/small-sheep-divide.md
@@ -0,0 +1,5 @@
+---
+"@bigcommerce/create-catalyst": minor
+---
+
+Changes the default behavior of the `create-catalyst` CLI such that it no longer writes the access token created by the OAuth device flow to the created project's `.env.local` file
diff --git a/packages/create-catalyst/src/commands/create.ts b/packages/create-catalyst/src/commands/create.ts
@@ -247,7 +247,6 @@ export const create = new Command('create')
     writeEnv(projectDir, {
       channelId: channelId.toString(),
       storeHash,
-      accessToken,
       customerImpersonationToken,
     });
 

diff --git a/packages/create-catalyst/src/commands/init.ts b/packages/create-catalyst/src/commands/init.ts
@@ -129,7 +129,6 @@ export const init = new Command('init')
     writeEnv(projectDir, {
       channelId: channelId.toString(),
       storeHash,
-      accessToken,
       customerImpersonationToken,
     });
   });
diff --git a/packages/create-catalyst/src/utils/write-env.ts b/packages/create-catalyst/src/utils/write-env.ts
@@ -7,23 +7,21 @@ export const writeEnv = (
   {
     channelId,
     storeHash,
-    accessToken,
     customerImpersonationToken,
   }: {
     channelId: string;
     storeHash: string;
-    accessToken: string;
     customerImpersonationToken: string;
   },
 ) => {
   outputFileSync(
     join(projectDir, '.env.local'),
     [
-      `AUTH_SECRET=${randomBytes(32).toString('hex')}`,
       `BIGCOMMERCE_STORE_HASH=${storeHash}`,
       `BIGCOMMERCE_CHANNEL_ID=${channelId}`,
-      `BIGCOMMERCE_ACCESS_TOKEN=${accessToken}`,
       `BIGCOMMERCE_CUSTOMER_IMPERSONATION_TOKEN=${customerImpersonationToken}`,
+      '',
+      `AUTH_SECRET=${randomBytes(32).toString('hex')}`,
       `CLIENT_LOGGER=false`,
       `ENABLE_ADMIN_ROUTE=true`,
       `NEXT_PUBLIC_DEFAULT_REVALIDATE_TARGET=3600`,