Apisix-dashboard: Backend API Cookie secret

[stu01509]

Bug report

Describe the bug

Hi all

I found in apisix-dashboard/api/internal/route.go, the cookie secret directly setting in the codebase, I think it may need to use api/conf/conf.yaml or env file to set it.
https://github.com/apache/apisix-dashboard/blob/master/api/internal/route.go#L58

[juzhiyuan]

cc @nic-chen @starsz to confirm.

[nic-chen]

oh, we don't use sessions, we could remove it.

[juzhiyuan]

ok, then it's not a high vulnerability issue? we could mark it as good first?

[nic-chen]

ok, then it's not a high vulnerability issue? we could mark it as good first?

It's not. This code is not used.

[starsz]

Good capture. @stu01509

[stu01509]

I will fix it in tonight, please assign the issue to me.