auth: add standard admin/DW2024! login account (exempt from prod boot-refusal)

f203fe5f6c87f0833dacbcf9502d625f59f8cd69 · 2026-08-27 13:47:36 -0700 · Steve Abrams

Files touched

M server.js

Diff

commit f203fe5f6c87f0833dacbcf9502d625f59f8cd69
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Aug 27 13:47:36 2026 -0700

    auth: add standard admin/DW2024! login account (exempt from prod boot-refusal)
---
 server.js | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/server.js b/server.js
index 5980095..53a4675 100644
--- a/server.js
+++ b/server.js
@@ -57,11 +57,15 @@ const LOGIN_RECORDS = (() => {
   const seed = {
     sdcc:  { env: 'SDCC_PASSWORD',  default: 'Pulse-2026'    },
     steve: { env: 'STEVE_PASSWORD', default: 'DWSecure2024!' },
+    // Standard fleet admin credential (admin / DW2024!). Intentionally
+    // defaulted and exempt from the prod boot-refusal below so the house
+    // admin login always works even when ADMIN_PASSWORD isn't set in .env.
+    admin: { env: 'ADMIN_PASSWORD', default: 'DW2024!', allowDefaultInProd: true },
   };
   const isProd = process.env.NODE_ENV === 'production';
   const missing = [];
-  for (const [user, { env }] of Object.entries(seed)) {
-    if (!process.env[env]) missing.push({ user, env });
+  for (const [user, { env, allowDefaultInProd }] of Object.entries(seed)) {
+    if (!allowDefaultInProd && !process.env[env]) missing.push({ user, env });
   }
   if (isProd && missing.length > 0) {
     const lines = missing.map(({ user, env }) => `  - ${env}  (for "${user}" account)`);

← 77b4310 migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso- · back to Norma Sdcc Pitch · chore: version bump v0.1.1 (session close — admin login acco 3738dac →