From 3fff3e5266d2e3781a31df492ea36d91944414a0 Mon Sep 17 00:00:00 2001
From: Miroslav Pejic <miroslav.pejic.85@gmail.com>
Date: Fri, 3 Apr 2026 01:02:01 +0200
Subject: [PATCH] [mirotalk] - fix: add startup warning when API_KEY_SECRET or
 JWT_SECRET use default values

---
 .env.template              |  2 +-
 app/src/config.template.js |  2 +-
 app/src/server.js          | 14 +++++++++++---
 package-lock.json          |  4 ++--
 package.json               |  2 +-
 public/js/brand.js         |  2 +-
 public/js/client.js        |  4 ++--
 7 files changed, 19 insertions(+), 11 deletions(-)

diff --git a/.env.template b/.env.template
index 2f320c88..f3536cea 100644
--- a/.env.template
+++ b/.env.template
@@ -1,5 +1,5 @@
 # ====================================================
-# MiroTalk P2P v.1.7.89 - Environment Configuration
+# MiroTalk P2P v.1.7.90 - Environment Configuration
 # ====================================================
 
 # App environment
diff --git a/app/src/config.template.js b/app/src/config.template.js
index e4a0dd7e..8113faf1 100644
--- a/app/src/config.template.js
+++ b/app/src/config.template.js
@@ -2,7 +2,7 @@
 
 /**
  * ==============================================
- * MiroTalk P2P v.1.7.89 - Configuration File
+ * MiroTalk P2P v.1.7.90 - Configuration File
  * ==============================================
  *
  * This file is the central configuration source.
diff --git a/app/src/server.js b/app/src/server.js
index a0f0117c..0c83fa71 100755
--- a/app/src/server.js
+++ b/app/src/server.js
@@ -45,7 +45,7 @@ dependencies: {
  * @license For commercial use or closed source, contact us at license.mirotalk@gmail.com or purchase directly from CodeCanyon
  * @license CodeCanyon: https://codecanyon.net/item/mirotalk-p2p-webrtc-realtime-video-conferences/38376661
  * @author  Miroslav Pejic - miroslav.pejic.85@gmail.com
- * @version 1.7.89
+ * @version 1.7.90
  *
  */
 
@@ -1134,7 +1134,7 @@ async function ngrokStart() {
 /**
  * Start Local Server with ngrok https tunnel (optional)
  */
-server.listen(port, null, () => {
+server.listen(port, null, async () => {
     log.debug(
         `%c
 
@@ -1151,10 +1151,18 @@ server.listen(port, null, () => {
 
     // https tunnel
     if (ngrokEnabled) {
-        ngrokStart();
+        await ngrokStart();
     } else {
         log.info('Server config', getServerConfig());
     }
+
+    // Warn if default secrets are still in use
+    if (api_key_secret === 'mirotalkp2p_default_secret') {
+        log.warn('WARNING: API_KEY_SECRET is set to the default value. Change it before deploying!');
+    }
+    if (jwtCfg.JWT_KEY === 'mirotalk_jwt_secret') {
+        log.warn('WARNING: JWT_SECRET is set to the default value. Change it before deploying!');
+    }
 });
 
 /**
diff --git a/package-lock.json b/package-lock.json
index e3975828..5c53feb2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "mirotalk",
-    "version": "1.7.89",
+    "version": "1.7.90",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "mirotalk",
-            "version": "1.7.89",
+            "version": "1.7.90",
             "license": "AGPL-3.0",
             "dependencies": {
                 "@mattermost/client": "11.5.0",
diff --git a/package.json b/package.json
index 2748d67f..4079b616 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "mirotalk",
-    "version": "1.7.89",
+    "version": "1.7.90",
     "description": "A free WebRTC browser-based video call",
     "main": "server.js",
     "scripts": {
diff --git a/public/js/brand.js b/public/js/brand.js
index 0c161ca3..5afdd045 100644
--- a/public/js/brand.js
+++ b/public/js/brand.js
@@ -107,7 +107,7 @@ let brand = {
     },
     about: {
         imageUrl: '../images/mirotalk-logo.gif',
-        title: 'WebRTC P2P v1.7.89',
+        title: 'WebRTC P2P v1.7.90',
         html: `
             <button 
                 id="support-button" 
diff --git a/public/js/client.js b/public/js/client.js
index 77914b6d..b02bbe14 100644
--- a/public/js/client.js
+++ b/public/js/client.js
@@ -15,7 +15,7 @@
  * @license For commercial use or closed source, contact us at license.mirotalk@gmail.com or purchase directly from CodeCanyon
  * @license CodeCanyon: https://codecanyon.net/item/mirotalk-p2p-webrtc-realtime-video-conferences/38376661
  * @author  Miroslav Pejic - miroslav.pejic.85@gmail.com
- * @version 1.7.89
+ * @version 1.7.90
  *
  */
 
@@ -14800,7 +14800,7 @@ function showAbout() {
     Swal.fire({
         background: swBg,
         position: 'center',
-        title: brand.about?.title && brand.about.title.trim() !== '' ? brand.about.title : 'WebRTC P2P v1.7.89',
+        title: brand.about?.title && brand.about.title.trim() !== '' ? brand.about.title : 'WebRTC P2P v1.7.90',
         imageUrl: brand.about?.imageUrl && brand.about.imageUrl.trim() !== '' ? brand.about.imageUrl : images.about,
         customClass: { image: 'img-about' },
         html: `