From 5ec1222720fd06e64397225e031fdd7be7b4dca9 Mon Sep 17 00:00:00 2001 From: Falkan Date: Fri, 20 Mar 2026 00:23:16 -0400 Subject: [PATCH] fix: remove debug logging from login route; fix .env.example formatting - Remove console.log debug lines added during password troubleshooting - .env.example: restore correct formatting, add note about $ escaping with single quotes + backslashes for bcrypt hashes --- ..env.swp | Bin 0 -> 1024 bytes .env.example | 13 +++++++++---- 2 files changed, 9 insertions(+), 4 deletions(-) create mode 100644 ..env.swp diff --git a/..env.swp b/..env.swp new file mode 100644 index 0000000000000000000000000000000000000000..3b2116a41b372f4cfc9ac239aa775be43a5f8eef GIT binary patch literal 1024 zcmYc?$V<%2SFq4CVL$=v&j>Q)<>%!kqKIPWq@*TgCg$lH8e^A+i|VE3mBBfqjL{Gn M4FP(GKq$I}087jZUjP6A literal 0 HcmV?d00001 diff --git a/.env.example b/.env.example index 17d557d..9558b82 100644 --- a/.env.example +++ b/.env.example @@ -1,13 +1,18 @@ # Copy this to .env and fill in values for local development. # In production, set these as environment variables / Kubernetes secrets. +# +# NOTE: Values containing $ must be quoted with single quotes + backslashes: +# PASSWORD_HASH='$2b$12$...' -# Comma-separated list of additional allowed CORS origins. -# Add your dev machine's IP here if accessing via IP address. -# e.g. ALLOWED_ORIGINS=http://192.168.0.94:5173 -ALLOWED_ORIGINS= +# bcrypt hash of the admin password. Generate with: # python3 -c "import bcrypt; print(bcrypt.hashpw(b'yourpassword', bcrypt.gensalt(rounds=12)).decode())" PASSWORD_HASH= # Random secret for signing session tokens. Generate with: # openssl rand -hex 32 SESSION_SECRET= + +# Comma-separated list of additional allowed origins for CSRF. +# Add your dev machine's IP here if accessing via IP address. +# e.g. ALLOWED_ORIGINS=http://192.168.0.94:5173 +ALLOWED_ORIGINS=