env-ify Basic-Auth: support BASIC_AUTH_USER/PASS, default unchanged (admin:DW2024!)

02ea04b3ebd3fce9b7a751b45998b1a365055483 · 2026-07-08 09:11:30 -0700 · Steve

Files touched

M server.js

Diff

commit 02ea04b3ebd3fce9b7a751b45998b1a365055483
Author: Steve <steve@designerwallcoverings.com>
Date:   Wed Jul 8 09:11:30 2026 -0700

    env-ify Basic-Auth: support BASIC_AUTH_USER/PASS, default unchanged (admin:DW2024!)
---
 server.js | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/server.js b/server.js
index c6642d9..a57351e 100644
--- a/server.js
+++ b/server.js
@@ -587,8 +587,12 @@ async function handleLiveStock(req, res, u) {
 }
 
 // Basic Auth gate (Steve 2026-07-02: all. is published but un/pw-gated).
-// Override with BASIC_AUTH=user:pass in .env; /healthz stays open for probes.
-const BASIC_AUTH = process.env.BASIC_AUTH || 'admin:DW2024!';
+// Override with BASIC_AUTH=user:pass (or BASIC_AUTH_USER / BASIC_AUTH_PASS) in .env;
+// default stays admin:DW2024! so behavior is byte-identical when unset. /healthz open.
+const BASIC_AUTH = process.env.BASIC_AUTH
+  || (process.env.BASIC_AUTH_USER && process.env.BASIC_AUTH_PASS
+      ? `${process.env.BASIC_AUTH_USER}:${process.env.BASIC_AUTH_PASS}`
+      : 'admin:DW2024!');
 const AUTH_OK = 'Basic ' + Buffer.from(BASIC_AUTH).toString('base64');
 
 const server = http.createServer((req, res) => {

← 7d0202a Enable Designtex live-stock (13→14): drop from SCHEMA_PARSE_ · back to All Designerwallcoverings · all.dw internal tool: default scope = all-but-archived (incl 2ac9b38 →