# REVISIT: This is not a good practice -> don't do it that way, we just did it to save some time :) ACCESS_TOKEN_SECRET=secret REFRESH_TOKEN_SECRET=refresh-secret