From a776ab54bcd4f9952a0e7220e4bce2b48695429d Mon Sep 17 00:00:00 2001
From: YouSiki <you.siki@outlook.com>
Date: Sun, 15 Jun 2025 13:16:53 +0800
Subject: [PATCH 1/2] Add environment variable override for cookie
 configuration

Cookies can now be overridden using LEETCODE_CSRF, LEETCODE_SESSION,
and LEETCODE_SITE environment variables when loading configuration.
---
 src/config/cookies.rs | 24 ++++++++++++++++++++++++
 src/config/mod.rs     | 19 ++++++++++++-------
 2 files changed, 36 insertions(+), 7 deletions(-)

diff --git a/src/config/cookies.rs b/src/config/cookies.rs
index 6c5f5c6..8492780 100644
--- a/src/config/cookies.rs
+++ b/src/config/cookies.rs
@@ -62,3 +62,27 @@ impl Display for Cookies {
         )
     }
 }
+
+/// Override cookies from environment variables
+pub const LEETCODE_CSRF_ENV: &str = "LEETCODE_CSRF";
+pub const LEETCODE_SESSION_ENV: &str = "LEETCODE_SESSION";
+pub const LEETCODE_SITE_ENV: &str = "LEETCODE_SITE";
+
+impl Cookies {
+    /// Load cookies from environment variables, overriding any existing values
+    /// if the environment variables are set.
+    pub fn with_env_override(mut self) -> Self {
+        if let Ok(csrf) = std::env::var(LEETCODE_CSRF_ENV) {
+            self.csrf = csrf;
+        }
+        if let Ok(session) = std::env::var(LEETCODE_SESSION_ENV) {
+            self.session = session;
+        }
+        if let Ok(site) = std::env::var(LEETCODE_SITE_ENV) {
+            if let Ok(leetcode_site) = LeetcodeSite::from_str(&site) {
+                self.site = leetcode_site;
+            }
+        }
+        self
+    }
+}
diff --git a/src/config/mod.rs b/src/config/mod.rs
index c1d9a4e..f3f5e40 100644
--- a/src/config/mod.rs
+++ b/src/config/mod.rs
@@ -46,14 +46,19 @@ impl Config {
 
         let s = fs::read_to_string(&conf)?;
         match toml::from_str::<Config>(&s) {
-            Ok(config) => match config.cookies.site {
-                cookies::LeetcodeSite::LeetcodeCom => Ok(config),
-                cookies::LeetcodeSite::LeetcodeCn => {
-                    let mut config = config;
-                    config.sys.urls = sys::Urls::new_with_leetcode_cn();
-                    Ok(config)
+            Ok(mut config) => {
+                // Override config.cookies with environment variables
+                config.cookies = config.cookies.with_env_override();
+
+                match config.cookies.site {
+                    cookies::LeetcodeSite::LeetcodeCom => Ok(config),
+                    cookies::LeetcodeSite::LeetcodeCn => {
+                        let mut config = config;
+                        config.sys.urls = sys::Urls::new_with_leetcode_cn();
+                        Ok(config)
+                    }
                 }
-            },
+            }
             Err(e) => {
                 let tmp = Self::root()?.join("leetcode.tmp.toml");
                 Self::write_default(tmp)?;

From 863d7f027dd001bddf8f6e448475bbf313e85030 Mon Sep 17 00:00:00 2001
From: yousiki <you.siki@outlook.com>
Date: Thu, 19 Jun 2025 15:15:04 +0800
Subject: [PATCH 2/2] Update README.md: add document for overriding cookies
 with environment variables.

---
 README.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/README.md b/README.md
index 14cea4c..315587a 100644
--- a/README.md
+++ b/README.md
@@ -321,6 +321,27 @@ csrf = '<your-leetcode-csrf-token>'
 session = '<your-leetcode-session-key>'
 ```
 
+#### Environment variables
+
+The cookies can also be overridden by environment variables, which might be useful to exclude the sensitive information from the configuration file `leetcode.toml`. To do this, you can leave the `csrf` and `session` fields empty in the configuration file and override cookies settings via the environment variables `LEETCODE_CSRF`, `LEETCODE_SESSION`, and `LEETCODE_SITE`:
+
+```toml
+[cookies]
+csrf = ''
+session = ''
+site = 'leetcode.com'
+```
+
+Then set the environment variables:
+
+```bash
+export LEETCODE_CSRF='<your-leetcode-csrf-token>'
+export LEETCODE_SESSION='<your-leetcode-session-key>'
+export LEETCODE_SITE='leetcode.cn' # or 'leetcode.com'
+```
+
+Note that `cookies.site` in still required in the `leetcode.toml` to avoid exception during configuration file parsing, but can be overridden using environment variables.
+
 ## Programmable
 
 If you want to filter LeetCode questions using custom Python scripts, add the following to your the configuration file:

<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
<html xmlns='http://www.w3.org/1999/xhtml'>
<head>
<title>pFad - Phonifier reborn</title>
<meta http-equiv='Content-Type' content='text/html; charset=utf-8' />
</head>
<body>
<h1>Pfad - The Proxy pFad of &#169; 2024 Garber Painting. All rights reserved.</h1>


<!-- Disclaimer -->
<p>Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.</p>
<br>
<p>Alternative Proxies:</p><p><a href="http://rainy.clevelandohioweatherforecast.com/php-proxy/index.php?q=https://patch-diff.githubusercontent.com/raw/clearloop/leetcode-cli/pull/195.patch" target="_blank">Alternative Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/index.php?u=https://patch-diff.githubusercontent.com/raw/clearloop/leetcode-cli/pull/195.patch" target="_blank">pFad Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/v3index.php?u=https://patch-diff.githubusercontent.com/raw/clearloop/leetcode-cli/pull/195.patch" target="_blank">pFad v3 Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/v4index.php?u=https://patch-diff.githubusercontent.com/raw/clearloop/leetcode-cli/pull/195.patch" target="_blank">pFad v4 Proxy</a></p></body>
</html>