From 6348d269a5eccc44d134d91d493acd266345fef7 Mon Sep 17 00:00:00 2001 From: boban Date: Thu, 2 Jul 2026 22:50:35 +0200 Subject: [PATCH] docs: fix stale first-login copy (random initial password, rotation optional) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The in-panel help "First login" section still claimed you log in with the literal default password `clusev` and that "the panel forces a password change immediately". Both are false since this cycle: the installer generates a RANDOM password shown once in the closing summary, and EnsureSecurityOnboarded only nudges (skippable), never forces. - help/overview.blade.php (en+de): rewritten — sign in with the initial password from the installer summary; setting your own is recommended (a banner reminds) but not forced. - lang/{en,de}/auth.php: default-password banner → "Initial password still in use" / "Initialpasswort noch aktiv". - ResetAdmin.php: reset output "Einmal-Passwort" → "Neues Passwort". - EnsureSecurityOnboarded.php: comment wording aligned. Co-Authored-By: Claude Opus 4.8 --- app/Console/Commands/ResetAdmin.php | 2 +- app/Http/Middleware/EnsureSecurityOnboarded.php | 2 +- lang/de/auth.php | 2 +- lang/en/auth.php | 2 +- .../views/livewire/help/content/de/overview.blade.php | 10 +++++----- .../views/livewire/help/content/en/overview.blade.php | 9 +++++---- 6 files changed, 14 insertions(+), 13 deletions(-) diff --git a/app/Console/Commands/ResetAdmin.php b/app/Console/Commands/ResetAdmin.php index d5db394..d8d3cf8 100644 --- a/app/Console/Commands/ResetAdmin.php +++ b/app/Console/Commands/ResetAdmin.php @@ -57,7 +57,7 @@ class ResetAdmin extends Command $this->info("Passwort für {$user->email} zurückgesetzt."); if (! $this->option('password')) { - $this->warn("Einmal-Passwort (jetzt notieren): {$password}"); + $this->warn("Neues Passwort (jetzt notieren): {$password}"); } if ($this->option('disable-2fa')) { $this->info('2FA + Backup-Codes entfernt — beim nächsten Login neu einrichten.'); diff --git a/app/Http/Middleware/EnsureSecurityOnboarded.php b/app/Http/Middleware/EnsureSecurityOnboarded.php index 0ffc3dd..11c1f54 100644 --- a/app/Http/Middleware/EnsureSecurityOnboarded.php +++ b/app/Http/Middleware/EnsureSecurityOnboarded.php @@ -9,7 +9,7 @@ use Symfony\Component\HttpFoundation\Response; /** * After login, NUDGE the operator to rotate the seeded password — but do not force it. The prompt * shows once per session and can be skipped (PasswordChange::skip sets `onboarding.password_skipped`); - * a persistent banner keeps warning while the default password is still in use. 2FA is optional too, + * a persistent banner keeps warning while the initial password is still in use. 2FA is optional too, * so it is never forced here. */ class EnsureSecurityOnboarded diff --git a/lang/de/auth.php b/lang/de/auth.php index b6d8f8b..184fc94 100644 --- a/lang/de/auth.php +++ b/lang/de/auth.php @@ -27,7 +27,7 @@ return [ 'save_and_continue' => 'Speichern & weiter', 'saving' => 'Speichere…', 'skip_for_now' => 'Vorerst überspringen', - 'default_pw_warning' => 'Standard-Passwort aktiv. Aus Sicherheitsgründen solltest du es ändern.', + 'default_pw_warning' => 'Initialpasswort noch aktiv. Aus Sicherheitsgründen solltest du es ändern.', 'default_pw_change' => 'Ändern', // ── Two-factor (shared label) ──────────────────────────────────────── diff --git a/lang/en/auth.php b/lang/en/auth.php index 9f21318..55e0848 100644 --- a/lang/en/auth.php +++ b/lang/en/auth.php @@ -27,7 +27,7 @@ return [ 'save_and_continue' => 'Save & continue', 'saving' => 'Saving…', 'skip_for_now' => 'Skip for now', - 'default_pw_warning' => 'Default password in use. For security, you should change it.', + 'default_pw_warning' => 'Initial password still in use. For security, you should change it.', 'default_pw_change' => 'Change', // ── Two-factor (shared label) ──────────────────────────────────────── diff --git a/resources/views/livewire/help/content/de/overview.blade.php b/resources/views/livewire/help/content/de/overview.blade.php index de0fd97..76dcba5 100644 --- a/resources/views/livewire/help/content/de/overview.blade.php +++ b/resources/views/livewire/help/content/de/overview.blade.php @@ -15,11 +15,11 @@

Erster Login

-

Nach der Installation meldest du dich mit der Admin-E-Mail und dem Standard-Passwort - clusev an (die Standard-E-Mail ist admin@clusev.local, - sofern beim Installieren keine andere gesetzt wurde). Das Panel erzwingt sofort einen - Passwortwechsel — `clusev` ist ein bekanntes Standard-Passwort und nur bis zur Änderung gültig. Ändere es - gleich beim ersten Login.

+

Nach der Installation meldest du dich mit der Admin-E-Mail und dem Initialpasswort + aus der Abschluss-Zusammenfassung des Installers an — ein zufällig generiertes Passwort, das nur einmal angezeigt wird. + Die Standard-E-Mail ist admin@clusev.local, sofern beim Installieren keine andere gesetzt + wurde. Ein eigenes Passwort zu setzen ist empfohlen — ein Banner erinnert dich daran — aber + nicht erzwungen, sodass dich eine verpasste Erinnerung nie aussperrt.

diff --git a/resources/views/livewire/help/content/en/overview.blade.php b/resources/views/livewire/help/content/en/overview.blade.php index cd97f1d..a57d2fb 100644 --- a/resources/views/livewire/help/content/en/overview.blade.php +++ b/resources/views/livewire/help/content/en/overview.blade.php @@ -14,10 +14,11 @@

First login

-

After installation, sign in with the admin e-mail and the default password - clusev (the default e-mail is admin@clusev.local - unless another was set at install time). The panel forces a password change immediately — - `clusev` is a known default and only valid until you change it. Change it right away on first login.

+

After installation, sign in with the admin e-mail and the initial password + from the installer's closing summary — a random, auto-generated password shown only once. The default e-mail is + admin@clusev.local unless another was set at install time. Setting your own password + is recommended — a banner keeps reminding you — but not forced, so a missed reminder + can never lock you out.