Use env var to read MongoDB password

Signed-off-by: Mihai Todor <todormihai@gmail.com>

.github/workflows/cicd.yml

@@ -29,6 +29,8 @@ jobs:
 
       - name: Run Tests
         run: ./fetch_utilities_data.sh && python -m pytest
+        env:
+          MONGODB_READONLY_PASSWORD: ${{ secrets.MONGODB_READONLY_PASSWORD }}
 
   deploy:
     name: Deploy to dev

.gitignore

@@ -7,3 +7,4 @@ __pycache__
 utilities/FASTA
 utilities/mongo_utilities.py
 /data
+secrets.env

app/common.py

@@ -1,17 +1,19 @@
+import os
+import re
 from collections import OrderedDict
+from datetime import datetime
+from itertools import groupby
 from threading import Lock
 from uuid import uuid4
+
 import pyliftover
-import requests
-from datetime import datetime
 import pymongo
+import requests
 from flask import abort
-from itertools import groupby
-import re
 
 # MongoDB Client URIs
-FHIR_genomics_data_client_uri = "mongodb+srv://download:download@cluster0.8ianr.mongodb.net/FHIRGenomicsData"
-utilities_data_client_uri = "mongodb+srv://download:download@cluster0.8ianr.mongodb.net/UtilitiesData"
+FHIR_genomics_data_client_uri = f"mongodb+srv://readonly:{os.getenv('MONGODB_READONLY_PASSWORD')}@cluster0.8ianr.mongodb.net/FHIRGenomicsData"
+utilities_data_client_uri = f"mongodb+srv://readonly:{os.getenv('MONGODB_READONLY_PASSWORD')}@cluster0.8ianr.mongodb.net/UtilitiesData"
 
 # MongoDB Clients
 client = pymongo.MongoClient(FHIR_genomics_data_client_uri)
@@ -620,9 +622,11 @@ def create_fhir_variant_resource(record, ref_seq, subject):
             inner_end = record['END'] - abs(record['CIEND'][0])
             outer_end = record['END'] + abs(record['CIEND'][1])
 
-        resource["component"].append({"code": {"coding": [{"system": "http://loinc.org", "code": "81301-4", "display": "Variant outer start-end"}]}, "valueRange": {"low": {"value": outer_start}, "high": {"value": outer_end}}})
+        resource["component"].append({"code": {"coding": [{"system": "http://loinc.org", "code": "81301-4", "display": "Variant outer start-end"}]},
+                                     "valueRange": {"low": {"value": outer_start}, "high": {"value": outer_end}}})
 
-        resource["component"].append({"code": {"coding": [{"system": "http://loinc.org", "code": "81302-2", "display": "Variant inner start-end"}]}, "valueRange": {"low": {"value": inner_start}, "high": {"value": inner_end}}})
+        resource["component"].append({"code": {"coding": [{"system": "http://loinc.org", "code": "81302-2", "display": "Variant inner start-end"}]},
+                                     "valueRange": {"low": {"value": inner_start}, "high": {"value": inner_end}}})
 
     # Variant population allele frequency
     if 'popAlleleFreq' in record:

run.py

@@ -3,6 +3,8 @@
 from app import create_app
 
 load_dotenv()
+# Load secrets from secrets.env file if available
+load_dotenv("secrets.env")
 
 app = create_app()
 

tests/conftest.py

@@ -1,7 +1,12 @@
 import pytest
+from dotenv import load_dotenv
 
 from app import create_app
 
+load_dotenv()
+# Load secrets from secrets.env file if available
+load_dotenv("secrets.env")
+
 
 @pytest.fixture(scope='module')
 def client():

utilities/common.py

@@ -1,9 +1,11 @@
-from enum import Enum
+import os
 import re
+from enum import Enum
+
 import pandas as pd
 import pymongo
 
-utilities_data_client_uri = "mongodb+srv://download:download@cluster0.8ianr.mongodb.net/UtilitiesData"
+utilities_data_client_uri = f"mongodb+srv://readonly:{os.getenv('MONGODB_READONLY_PASSWORD')}@cluster0.8ianr.mongodb.net/UtilitiesData"
 utilities_client = pymongo.MongoClient(utilities_data_client_uri)
 utilities_db = utilities_client.UtilitiesData
 transcript_data = utilities_db.Transcripts