From 76d06a41400d8e0bc22d1e1f426288a345c273a6 Mon Sep 17 00:00:00 2001
From: Hamza-Ayed <hamzaayedflutter@gmail.com>
Date: Tue, 28 Apr 2026 13:45:55 +0300
Subject: [PATCH] Switched to purely reading secret_key_pay via environment
 variables

---
 loginWallet.php | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/loginWallet.php b/loginWallet.php
index 43f8d12..d7b5434 100755
--- a/loginWallet.php
+++ b/loginWallet.php
@@ -77,9 +77,8 @@ try {
         'jti'         => bin2hex(random_bytes(16)),
     ];
 
-    $secretKey = file_exists('/home/intaleq-api/.secret_key_pay') 
-        ? trim(file_get_contents('/home/intaleq-api/.secret_key_pay')) 
-        : trim(file_get_contents('/home/intaleq-api/.secret_key'));
+    $keyPathPay = getenv('SECRET_KEY_PAY_PATH');
+    $secretKey  = trim(file_get_contents($keyPathPay));
     $jwt = Firebase\JWT\JWT::encode($payload, $secretKey, 'HS256');
 
     $hmac = hash_hmac('sha256', $id, getenv('SECRET_KEY_HMAC'));