mirror of
https://github.com/PR0M3TH3AN/TORCH.git
synced 2026-11-03 19:34:24 +00:00
google-labs-jules[bot]andPR0M3TH3AN
3648b0da40
Removes the hardcoded `auth: "admin:password"` from `torch-config.example.json` to prevent users from accidentally deploying with insecure defaults. Adds a regression test `test/verify-example-config-security.test.mjs` to ensure the example config does not contain default credentials in the future. Co-authored-by: PR0M3TH3AN <[email protected]>
15 lines
473 B
JavaScript
15 lines
473 B
JavaScript
import test from 'node:test';
|
|
import assert from 'node:assert';
|
|
import fs from 'node:fs';
|
|
import path from 'node:path';
|
|
|
|
test('torch-config.example.json Security', (t) => {
|
|
const configPath = path.resolve('torch-config.example.json');
|
|
const content = fs.readFileSync(configPath, 'utf8');
|
|
const config = JSON.parse(content);
|
|
|
|
if (config.dashboard) {
|
|
assert.strictEqual(config.dashboard.auth, undefined, 'Example config should not contain auth field');
|
|
}
|
|
});
|