feat(security): implement dynamic tactical license gate, instant key revocation, and clean hardcoded credentials

2026-08-18 13:46:02 +03:00
parent 8375773898
commit cb384765fb
17 changed files with 439 additions and 38 deletions
@@ -346,8 +346,8 @@
     CONFIG
  ─────────────────────────────────────────── */
  const API_BASE = window.location.origin; // Dynamically use the current host
-  const API_KEY  = 'zP9vL5mK2nQ8xR7jT4wS1yB6hG3fV0cX';
-  const HEADERS  = { 'x-api-key': API_KEY };
+  const API_KEY  = new URLSearchParams(window.location.search).get('api_key') || localStorage.getItem('map_api_key') || '';
+  const HEADERS  = API_KEY ? { 'x-api-key': API_KEY } : {};

  const ROUTES = {
    LEVANT: {