Closed gedw99 closed 3 weeks ago
I tried to wrk out how to pick a version to see if the older version did not have this bug.
Could not find any docs on that
fly launch --from https://github.com/medama-io/example-fly-io@v0.4.4
Launching from git repo https://github.com/medama-io/example-fly-io@v0.4.4
Cloning into '.'...
remote: Repository not found.
fatal: repository 'https://github.com/medama-io/example-fly-io@v0.4.4/' not found
Error: exit status 128
Were you able to login with CHANGE_ME_ON_FIRST_LOGIN
on first login? Was that successful?
Or is this after you changed the password on your analytics dashboard, and now it doesn't work anymore?
are you saying the “ CHANGE_ME_ON_FIRST_LOGIN “ is the default password ?
Yes. It is intentionally kept very annoying so there is a very low chance the user doesn't forget to update it.
OK works.
I copy passed it and left a " " ( space at the end, which also failed. Maybe think about stripping white spaces around the password passed in too. but not a biggy :)
will close this, as it was user training failure :)
One idea. After they login with that password, force a password change screen; MUCH more secure. Otherwise, devs are going to be leaving servers with "CHANGE_ME_ON_FIRST_LOGIN" as the password.
Will close for now. Can make a new Issue if we think this is a good idea.
will close this, as it was user training failure :)
I'll add this to my personal backlog so there's no need to make a new issue for it, but some clear pictures which show the login page and password in the documentation to accompany the setup guide should help with this 👍
After they login with that password, force a password change screen; MUCH more secure.
When first designing this, that was what I thought. But I didn't like the idea of adding a new column just for this setting. However, after #113, it should be very very easy to add this as a login check since settings are stored in a JSON blob, so it's definitely a low priority QOL change that's worth adding to the backlog. Noted 👍
Nice one ☝️
I am doing all auth with passkeys btw with golang .
let me know if it’s usefull
it syncs between the users devices and is more secure because the server has nothing basically if hacked.
let me know if it’s usefull
I wouldn't be against a PR implementing this, but I don't think I'll ever personally implement this as I would be more focused on other features.
Nah I can’t afford the time .
here is the code though : https://github.com/egregors/passkey
It can work with a Proxy ( caddy, etc ) or built in to a goalng project.
Its still going to change though..
Deploying as per https://oss.medama.io/deployment/fly
All deploys fine and quick but then I cant login as admin to create a new password...