mirror of
https://github.com/plankanban/planka.git
synced 2026-02-24 19:08:59 +03:00
[Request] Generate Admin Login Credentials instead of static default values #26
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @stranger-danger-zamu on GitHub (Sep 11, 2020).
Hey,
One thing I did notice was that you are using demo credentials for login.
More mature OSS usually uses a patterns where the username and password is generated and printed out into the logs on first run and to a text file on disk. If the user misses the admin password in the logs, they can just run a
docker exec <planka container name> cat <some persistent location>and get the password.This is both safer, as there is no default user that just exists and might be forgotten about, and a better user experience, it definitely took me a lot longer than I would like to admit to figure out how I was supposed to get past the login page.
This looks super promising and open source, thanks for all the work so far and keep up the good work!
@meltyshev commented on GitHub (Sep 24, 2020):
Hi! Sorry for the long answer. Yes, already thought about that, I don't like that demo user too.
@NeodymiumPhish commented on GitHub (Mar 6, 2021):
A better solution might be to have a default "demo" / start account declared in the environmental variables when you make the container. Like
-e DEMO_USER=<insert username>and-e DEMO_USER_PASS=<insert password>.On the backend (no idea how to implement this part, but it's just a thought), at launch Planka could check for other administrator accounts in the database and disable the Demo account if other admin accounts exist.
Alternatively, the onboarding could have the option/suggestion of deleting the demo account once a new admin is created, and the database could flag the account so that it's inaccessible after the admin checks the box to delete/disable the demo account.
@meltyshev commented on GitHub (Oct 17, 2023):
91bc889fed