From 41d7d9ee703b843d61c769634cc5a1cdd14b3d52 Mon Sep 17 00:00:00 2001
From: Tiago Yamamoto <tiago.ribeiro@inventcloud.com.br>
Date: Wed, 24 Dec 2025 17:14:50 -0300
Subject: [PATCH] fix: update superadmin hash to match deployed PASSWORD_PEPPER

Uses pepper: some-random-string-for-password-hashing
Password: Admin@2025!
---
 backend/cmd/fixhash/main.go                 | 44 +++++++++++++++++++++
 backend/migrations/010_seed_super_admin.sql |  5 ++-
 2 files changed, 47 insertions(+), 2 deletions(-)
 create mode 100644 backend/cmd/fixhash/main.go

diff --git a/backend/cmd/fixhash/main.go b/backend/cmd/fixhash/main.go
new file mode 100644
index 0000000..7ad40c0
--- /dev/null
+++ b/backend/cmd/fixhash/main.go
@@ -0,0 +1,44 @@
+package main
+
+import (
+	"database/sql"
+	"fmt"
+
+	_ "github.com/lib/pq"
+	"golang.org/x/crypto/bcrypt"
+)
+
+func main() {
+	db, err := sql.Open("postgres", "postgres://yuki:xl1zfmr6e9bb@db-60059.dc-sp-1.absamcloud.com:26868/gohorsejobs_dev?sslmode=require")
+	if err != nil {
+		fmt.Println("❌ Connection error:", err)
+		return
+	}
+	defer db.Close()
+
+	// USE THE PEPPER FROM THE DEPLOYED BACKEND .env
+	password := "Admin@2025!"
+	pepper := "some-random-string-for-password-hashing" // FROM DEPLOYED .env
+	passwordWithPepper := password + pepper
+
+	newHash, err := bcrypt.GenerateFromPassword([]byte(passwordWithPepper), bcrypt.DefaultCost)
+	if err != nil {
+		fmt.Println("❌ Hash generation error:", err)
+		return
+	}
+
+	fmt.Println("🔐 Generated new hash with CORRECT pepper:")
+	fmt.Println("   Password:", password)
+	fmt.Println("   Pepper:", pepper)
+	fmt.Println("   Hash:", string(newHash))
+
+	result, err := db.Exec("UPDATE users SET password_hash = $1, status = 'active' WHERE identifier = 'superadmin'", string(newHash))
+	if err != nil {
+		fmt.Println("❌ Update error:", err)
+		return
+	}
+
+	rows, _ := result.RowsAffected()
+	fmt.Printf("\n✅ SuperAdmin updated! Rows affected: %d\n", rows)
+	fmt.Println("\n🔄 Tente logar novamente com superadmin / Admin@2025!")
+}
diff --git a/backend/migrations/010_seed_super_admin.sql b/backend/migrations/010_seed_super_admin.sql
index 91bf4b7..d4642cb 100644
--- a/backend/migrations/010_seed_super_admin.sql
+++ b/backend/migrations/010_seed_super_admin.sql
@@ -17,11 +17,12 @@ VALUES (
 ) ON CONFLICT (slug) DO NOTHING;
 
 -- 2. Insert Super Admin User
--- Hash: bcrypt(Admin@2025! + gohorse-pepper) - HARDCODED for consistency
+-- Hash: bcrypt(Admin@2025! + some-random-string-for-password-hashing)
+-- This matches PASSWORD_PEPPER from deployed backend .env
 INSERT INTO users (identifier, password_hash, role, full_name, email, status, active)
 VALUES (
     'superadmin',
-    '$2a$10$/AodyEEQtKCjdeNThEUFee6QE/KvEBTzi1AnqQ78nwavkT1XFnw/6',
+    '$2a$10$x7AN/r8MpVylJnd2uq4HT.lZbbNCqHuBuadpsr4xV.KlsleITmR5.',
     'superadmin',
     'Super Administrator',
     'admin@gohorsejobs.com',