Keli Grubb
28ac43e47b
Some checks failed
ci/woodpecker/push/ci Pipeline failed
Co-authored-by: Madison Grubb <madison@elastiflow.com> Reviewed-on: #1
30 lines
1.3 KiB
JavaScript
30 lines
1.3 KiB
JavaScript
import { randomBytes } from 'node:crypto'
|
|
import { hashPassword } from './password.js'
|
|
|
|
const DEFAULT_ADMIN_IDENTIFIER = 'admin'
|
|
const PASSWORD_CHARS = 'abcdefghjkmnopqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ23456789'
|
|
|
|
const generateRandomPassword = () => {
|
|
const bytes = randomBytes(14)
|
|
return Array.from(bytes, b => PASSWORD_CHARS[b % PASSWORD_CHARS.length]).join('')
|
|
}
|
|
|
|
export async function bootstrapAdmin(run, get) {
|
|
const row = await get('SELECT COUNT(*) as n FROM users')
|
|
if (row?.n !== 0) return
|
|
|
|
const email = process.env.BOOTSTRAP_EMAIL?.trim()
|
|
const password = process.env.BOOTSTRAP_PASSWORD
|
|
const identifier = (email && password) ? email : DEFAULT_ADMIN_IDENTIFIER
|
|
const plainPassword = (email && password) ? password : generateRandomPassword()
|
|
|
|
await run(
|
|
'INSERT INTO users (id, identifier, password_hash, role, created_at, auth_provider, oidc_issuer, oidc_sub) VALUES (?, ?, ?, ?, ?, ?, ?, ?)',
|
|
[crypto.randomUUID(), identifier, hashPassword(plainPassword), 'admin', new Date().toISOString(), 'local', null, null],
|
|
)
|
|
|
|
if (!email || !password) {
|
|
console.log(`\n[KestrelOS] No bootstrap admin configured. Default admin created. Sign in at /login with:\n\n Identifier: ${identifier}\n Password: ${plainPassword}\n\n Set BOOTSTRAP_EMAIL and BOOTSTRAP_PASSWORD to use your own credentials on first run.\n`)
|
|
}
|
|
}
|