read secret key from config.json

config.json

@@ -1,5 +1,6 @@
 {
   "api": {
+    "secret": "CHANGE_YOUR_SECRET_HERE",
     "database_name": "music.sqlite3",
     "single_thread": true,
     "addr": ":8080",

pkg/api/api.go

@@ -2,11 +2,10 @@ package api
 
 import (
 	"github.com/gorilla/sessions"
-	"msw-open-music/pkg/database"
 	"msw-open-music/pkg/commonconfig"
+	"msw-open-music/pkg/database"
 	"msw-open-music/pkg/tmpfs"
 	"net/http"
-	"os"
 )
 
 type API struct {
@@ -29,7 +28,7 @@ func NewAPI(config commonconfig.Config) (*API, error) {
 		return nil, err
 	}
 
-	store := sessions.NewCookieStore([]byte(os.Getenv("SESSION_KEY")))
+	store := sessions.NewCookieStore([]byte(config.APIConfig.SECRET))
 
 	mux := http.NewServeMux()
 	apiMux := http.NewServeMux()

pkg/commonconfig/config.go

@@ -11,6 +11,7 @@ type APIConfig struct {
 	Addr             string         `json:"addr"`
 	FfmpegThreads    int64          `json:"ffmpeg_threads"`
 	FfmpegConfigList []FfmpegConfig `json:"ffmpeg_config_list"`
+	SECRET           string         `json:"secret"`
 }
 
 type FfmpegConfigList struct {