mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-10-21 14:36:31 +00:00
Maurice
23196aa038
It was written out twice — once in the seeder that creates the account, once in the config payload the login screen reads it from. The two have to match exactly or the published demo credentials stop working, which is a poor thing to leave to copy-paste. It moves next to DEMO_EMAIL_PRIMARY, which the same comment block already argues for. Also clears a Sonar S2068 "hard-coded password" on the auth service: the value is public on purpose, but a literal next to a `demo_password` key is exactly what the rule looks for.
34 lines
1.3 KiB
TypeScript
34 lines
1.3 KiB
TypeScript
// Central registry of demo-user email addresses.
|
|
//
|
|
// Historical: the demo account was seeded as "demo@trek.app" (see
|
|
// authService.demoLogin), but several guards — demoUploadBlock in
|
|
// the upload block that used to live in middleware/auth.ts, the MFA/backup-code
|
|
// bypasses in authService —
|
|
// were still checking the pre-rename "demo@nomad.app" string, so they
|
|
// either never fired or silently diverged between call sites. Routing
|
|
// every check through this constant keeps them aligned.
|
|
|
|
export const DEMO_EMAIL_PRIMARY = 'demo@trek.app';
|
|
|
|
/**
|
|
* The demo account's password. Public on purpose — a demo instance shows it on
|
|
* the login screen so visitors can get in — but it was written out twice, in the
|
|
* seeder and in the config payload, which is one copy too many for something the
|
|
* seeder has to match exactly for the login to work.
|
|
*/
|
|
export const DEMO_PASS = 'demo12345';
|
|
|
|
/**
|
|
* All email addresses that should be treated as the demo account.
|
|
* Includes the historical `demo@nomad.app` identifier so instances that
|
|
* upgraded in place without resetting the DB still hit demo-mode guards.
|
|
*/
|
|
export const DEMO_EMAILS: ReadonlySet<string> = new Set([
|
|
DEMO_EMAIL_PRIMARY,
|
|
'demo@nomad.app',
|
|
]);
|
|
|
|
export function isDemoEmail(email: string | null | undefined): boolean {
|
|
return !!email && DEMO_EMAILS.has(email);
|
|
}
|