Update admin_routes.py

admin_routes.py

@@ -19,11 +19,20 @@ import jwt
 
 from utils import log
 from config_provider import ConfigProvider
+import os
+from dotenv import load_dotenv
+
+# Load environment variables
+load_dotenv()
 
 # ===================== Constants & Config =====================
-JWT_SECRET = "flare-admin-secret-key-change-in-production"
-JWT_ALGORITHM = "HS256"
-JWT_EXPIRATION_HOURS = 24
+JWT_SECRET = os.getenv("JWT_SECRET", "flare-admin-secret-key-change-in-production")
+JWT_ALGORITHM = os.getenv("JWT_ALGORITHM", "HS256")
+JWT_EXPIRATION_HOURS = int(os.getenv("JWT_EXPIRATION_HOURS", "24"))
+
+# Production check
+if os.getenv("ENVIRONMENT") == "production" and JWT_SECRET == "flare-admin-secret-key-change-in-production":
+    raise ValueError("JWT_SECRET must be changed in production!")
 
 router = APIRouter(prefix="/api")
 security = HTTPBearer()