julian
0a8258a672
Running `pnpm --filter @parking/server seed-admin` with no env vars now prompts for a username (blank -> "admin") and then a password. Env vars (ADMIN_USER / ADMIN_PASS) and a CLI arg still work for non-interactive installs. Read prompts through a single readline async line-iterator so it's robust over both a TTY and a pipe (chaining readline/promises question() over a pipe could drop buffered lines). Verified: default + custom username, env-var path.
77 lines
2.4 KiB
JavaScript
77 lines
2.4 KiB
JavaScript
// Seed the first admin user (run once at install).
|
|
//
|
|
// pnpm --filter @parking/server seed-admin
|
|
// -> prompts for a username (default "admin") and password
|
|
//
|
|
// Non-interactive (install scripts):
|
|
// ADMIN_USER=admin ADMIN_PASS='strong-pass' pnpm --filter @parking/server seed-admin
|
|
//
|
|
// A username may also be passed as an argument. Refuses to overwrite an existing
|
|
// user unless FORCE=1 (which resets that user's password).
|
|
|
|
import { randomUUID } from "node:crypto";
|
|
import { createInterface } from "node:readline/promises";
|
|
import { stdin, stdout } from "node:process";
|
|
import { createRequire } from "node:module";
|
|
|
|
const require = createRequire(import.meta.url);
|
|
const bcrypt = require("bcrypt");
|
|
const { createDb, users, eq } = require("@parking/db");
|
|
|
|
const DEFAULT_USERNAME = "admin";
|
|
|
|
// Lazily create one readline interface and read answers sequentially through a
|
|
// single async line iterator — robust whether stdin is a TTY or a pipe (chaining
|
|
// readline/promises question() over a pipe can drop buffered lines).
|
|
let rl = null;
|
|
let lines = null;
|
|
async function prompt(label) {
|
|
if (!rl) {
|
|
rl = createInterface({ input: stdin, output: stdout });
|
|
lines = rl[Symbol.asyncIterator]();
|
|
}
|
|
stdout.write(label);
|
|
const { value } = await lines.next();
|
|
return (value ?? "").trim();
|
|
}
|
|
|
|
// Username: env var > CLI arg > prompt (blank -> default "admin").
|
|
let username = process.env.ADMIN_USER ?? process.argv[2];
|
|
if (!username) {
|
|
username = (await prompt(`Admin username [${DEFAULT_USERNAME}]: `)) || DEFAULT_USERNAME;
|
|
}
|
|
|
|
let password = process.env.ADMIN_PASS;
|
|
if (!password) {
|
|
password = await prompt(`Password for "${username}": `);
|
|
}
|
|
rl?.close();
|
|
|
|
if (!password || password.length < 8) {
|
|
console.error("password must be at least 8 characters");
|
|
process.exit(1);
|
|
}
|
|
|
|
const db = createDb();
|
|
const existing = await db.select().from(users).where(eq(users.username, username)).get();
|
|
if (existing && process.env.FORCE !== "1") {
|
|
console.error(`user "${username}" already exists (set FORCE=1 to reset the password)`);
|
|
process.exit(1);
|
|
}
|
|
|
|
const passwordHash = await bcrypt.hash(password, 12);
|
|
|
|
if (existing) {
|
|
await db.update(users).set({ passwordHash, role: "admin" }).where(eq(users.id, existing.id));
|
|
console.log(`reset password for admin "${username}"`);
|
|
} else {
|
|
await db.insert(users).values({
|
|
id: randomUUID(),
|
|
username,
|
|
passwordHash,
|
|
role: "admin",
|
|
});
|
|
console.log(`created admin "${username}"`);
|
|
}
|
|
process.exit(0);
|