Antes: 010_seed_super_admin.sql tinha hash bcrypt fixo amarrado a um pepper específico. Qualquer mudança no PASSWORD_PEPPER quebrava todos os logins silenciosamente após reset do banco. Agora: - migration 010: insere superadmin com placeholder inválido + force_change_password. ON CONFLICT DO NOTHING preserva o hash se o seeder já rodou. - seeder users.js: faz upsert de 'lol' com bcrypt(senha + env.PASSWORD_PEPPER) em runtime. Mudar o pepper e re-rodar o seeder é suficiente para atualizar as credenciais sem tocar em nenhuma migration. - docs/AGENTS.md: atualiza gotcha #1 explicando o novo fluxo migrate → seed - docs/DEVOPS.md: fix opção 1 do troubleshooting inclui re-deploy do seeder Fluxo correto após reset do banco (coberto pelo start.sh opções 2, 6, 8): npm run migrate → superadmin criado, hash = placeholder npm run seed → hash recalculado com PEPPER do ambiente, status = active Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| txt | ||
| AGENTS.md | ||
| API.md | ||
| API_SECURITY.md | ||
| BACKEND_COVERAGE.md | ||
| CAREERJET_GAP_ANALYSIS.md | ||
| CLOUDFLARE.md | ||
| DATABASE.md | ||
| DEVOPS.md | ||
| FULL_TEST_REPORT.md | ||
| GUIA_MIGRACAO_FORGEJO.md | ||
| publicar-vaga-routes.md | ||
| README.md | ||
| ROADMAP.md | ||
| TASKS.md | ||
| TEST_REPORT.md | ||
| TEST_USERS.md | ||
| WORKFLOWS.md | ||
Project Documentation - GoHorse Jobs
This directory holds internal team documentation, guides, and extended context regarding project structure and architecture.
🚨 AI Rules Warning 🚨
Before making ANY changes to infrastructure deployment manifests or Kubernetes files, please refer to the project-wide AI Rules located at .agent/rules.md.
Do NOT touch k3s or k8s files. Do not alter raw RSA/base64 authentication keys.