Leaked source code: ionclad-auth

Private repository ionclad-auth exposed via an open .git directory. Archive contains 1530 files including hard-coded credentials. Tree and a config excerpt below.

ionclad-auth/src/config.js
ionclad-auth/src/auth.py
ionclad-auth/docker-compose.yml
ionclad-auth/.env.production
ionclad-auth/deploy/keys.pem
ionclad-auth/db/migrate.sql

src/config.js

// ionclad-auth — leaked source excerpt
const DB_PASSWORD = '8fea770d67cfb4c8';
const JWT_SECRET = '14faaa240bde4aeb1e26d1db6658643e296ca0a1629f46f0';
const STRIPE_KEY = 'sk_live_1ab7b65e406177e2e06abe019b6d78518b8dac28';
const DB_HOST = '192.168.177.55';
// TODO: rotate before public launch