Basic Auth default → house admin/DW2024! (still BASIC_AUTH-overridable)

9fc2f592705958fc5fe7e0ea2a8520e8b10ceb5e · 2026-07-28 11:12:12 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

M server.js

Diff

commit 9fc2f592705958fc5fe7e0ea2a8520e8b10ceb5e
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue Jul 28 11:12:12 2026 -0700

    Basic Auth default → house admin/DW2024! (still BASIC_AUTH-overridable)
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index a408f10..ded4f2d 100644
--- a/server.js
+++ b/server.js
@@ -48,7 +48,7 @@ function fetchNewest(limit, cb) {
 
 // HTTP Basic Auth gate. Credentials come from BASIC_AUTH ("user:pass"), default admin:admin.
 // /healthz is intentionally left OPEN so the deploy smoke-test + uptime probes work unauthed.
-const [AUTH_USER, AUTH_PASS] = (process.env.BASIC_AUTH || 'admin:admin').split(':');
+const [AUTH_USER, AUTH_PASS] = (process.env.BASIC_AUTH || 'admin:DW2024!').split(':');
 function authed(req) {
   const h = req.headers.authorization || '';
   if (!h.startsWith('Basic ')) return false;

← 09f66bb auto-save: 2026-07-28T09:59:38 (1 files) — .deploy.conf · back to New Engine · Repoint engine to port 9870 (9840 taken on Kamatera) c6f56d6 →