updated for using .env

app/internal/handlers/login.go

@@ -4,18 +4,18 @@ import (
 	"database/sql"
 	"log"
 	"net/http"
+	"os"
 	"strconv"
 	"time"
 
 	"github.com/golang-jwt/jwt/v5"
+	"github.com/joho/godotenv"
 	"golang.org/x/crypto/bcrypt"
 
 	"github.com/patel-mann/poll-system/app/internal/models"
 	"github.com/patel-mann/poll-system/app/internal/utils"
 )
 
-var jwtKey = []byte("your-secret-key") //TODO: Move to env/config
-
 // Helper function to get redirect URL based on role
 func getDefaultRedirectURL(role int) string {
 	switch role {
@@ -49,6 +49,18 @@ func renderRegisterError(w http.ResponseWriter, errorMsg string) {
 
 // Helper function to create and sign JWT token
 func createJWTToken(userID, role int) (string, time.Time, error) {
+
+	err := godotenv.Load() // or specify path: godotenv.Load("/path/to/.env")
+	if err != nil {
+	log.Fatalf("Error loading .env file: %v", err)
+	}
+
+	// Get individual components from environment variables
+	jwtSecret := os.Getenv("JWT_SECRET")
+
+	var jwtKey = []byte(jwtSecret) //TODO: Move to env/config
+
+
 	expirationTime := time.Now().Add(12 * time.Hour)
 	claims := &models.Claims{
 		UserID: userID,