From 55fb17634dec7fbece3b9bf39aa33aa7934669d1 Mon Sep 17 00:00:00 2001 From: Andil Date: Fri, 28 Aug 2026 09:00:51 +0000 Subject: [PATCH] security: remove hardcoded admin credentials --- backend/src/scripts/createAdmin.js | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/backend/src/scripts/createAdmin.js b/backend/src/scripts/createAdmin.js index 619d456..a53adcb 100644 --- a/backend/src/scripts/createAdmin.js +++ b/backend/src/scripts/createAdmin.js @@ -1,9 +1,15 @@ +require('dotenv').config() + const bcrypt = require('bcrypt') const prisma = require('../config/prisma') async function createAdmin() { - const email = 'admin@thetiptop.fr' - const password = 'Admin@TipTop2026!' + const email = process.env.ADMIN_EMAIL + const password = process.env.ADMIN_PASSWORD + + if (!email || !password) { + throw new Error('ADMIN_EMAIL et ADMIN_PASSWORD doivent être définis') + } const existing = await prisma.user.findUnique({ where: { email } })