[object Object]

← back to Homesonspec

chore(TK-10): finalize secret scrub — gitignore ROLLBACK-DNS.txt, env-based admin test cred

1c821fb029b0e3447d75af271c768c88c61e8009 · 2026-07-27 17:24:45 -0700 · Steve Abrams

History rewritten via git filter-repo --replace-text (GoDaddy sso-key + admin
default removed from all 70 commits). This commit stops the rollback file from
re-entering git and removes the last hardcoded test credential.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Files touched

Diff

commit 1c821fb029b0e3447d75af271c768c88c61e8009
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jul 27 17:24:45 2026 -0700

    chore(TK-10): finalize secret scrub — gitignore ROLLBACK-DNS.txt, env-based admin test cred
    
    History rewritten via git filter-repo --replace-text (GoDaddy sso-key + admin
    default removed from all 70 commits). This commit stops the rollback file from
    re-entering git and removes the last hardcoded test credential.
    
    Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .gitignore                     | 3 +++
 ROLLBACK-DNS.txt               | 4 ----
 tests/end-to-end/admin.spec.ts | 4 +++-
 3 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/.gitignore b/.gitignore
index 480ae50..bd2b4bf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,3 +21,6 @@ cutover-dns.sh
 golive-homesonspec.sh
 retarget-domain.sh
 screenrecord/
+
+# rollback file is regenerated at cutover time; never commit (holds live creds)
+ROLLBACK-DNS.txt
diff --git a/ROLLBACK-DNS.txt b/ROLLBACK-DNS.txt
deleted file mode 100644
index 2e6d3d8..0000000
--- a/ROLLBACK-DNS.txt
+++ /dev/null
@@ -1,4 +0,0 @@
-# Undo the homesonspec.com cutover — restore the pre-cutover nameservers:
-curl -s -X PUT "https://api.godaddy.com/v1/domains/homesonspec.com" \
-  -H "Authorization: sso-key REDACTED_GODADDY_KEY" -H "Content-Type: application/json" \
-  --data '{"nameServers": ["ns69.domaincontrol.com", "ns70.domaincontrol.com"]}'
diff --git a/tests/end-to-end/admin.spec.ts b/tests/end-to-end/admin.spec.ts
index 7b2d5dc..37f9103 100644
--- a/tests/end-to-end/admin.spec.ts
+++ b/tests/end-to-end/admin.spec.ts
@@ -1,7 +1,9 @@
 import { expect, test } from "@playwright/test";
 
 const ADMIN = "http://localhost:3101";
-const AUTH = "Basic " + Buffer.from("admin:REDACTED_ADMIN_PW").toString("base64");
+// Credentials come from the env (same BASIC_AUTH the admin app reads) — no hardcoded
+// default. Set BASIC_AUTH in the test env to run the authenticated case.
+const AUTH = "Basic " + Buffer.from(process.env.BASIC_AUTH ?? "admin:set-BASIC_AUTH-to-run").toString("base64");
 
 test("admin challenges without credentials (401)", async ({ request }) => {
   const response = await request.get(ADMIN, { failOnStatusCode: false });

← 77fbb63 auto-save: 2026-07-27T17:22:24 (1 files) — deploy-kamatera.s  ·  back to Homesonspec  ·  chore: v0.3.0 (session close) — honest positioning, admin fa 762fa0e →