security: remove hardcoded admin credentials

This commit is contained in:
2026-08-28 09:00:51 +00:00
parent 4d7ca7945b
commit 55fb17634d

View File

@@ -1,9 +1,15 @@
require('dotenv').config()
const bcrypt = require('bcrypt') const bcrypt = require('bcrypt')
const prisma = require('../config/prisma') const prisma = require('../config/prisma')
async function createAdmin() { async function createAdmin() {
const email = 'admin@thetiptop.fr' const email = process.env.ADMIN_EMAIL
const password = 'Admin@TipTop2026!' const password = process.env.ADMIN_PASSWORD
if (!email || !password) {
throw new Error('ADMIN_EMAIL et ADMIN_PASSWORD doivent être définis')
}
const existing = await prisma.user.findUnique({ where: { email } }) const existing = await prisma.user.findUnique({ where: { email } })