What's pending across every project
1 open · sorted by priority then due-date
Filtered by tag cms clear
todo
high
Change seeded CMS admin password — admin123 is in the migration file and the CMS is now public
VajraCMS went live at https://cms.vajravolt.com on 2026-09-07. The seed account created by VajraBackendGo/migrations/0033_cms_user.up.sql is admin@vajravolt.in / admin123 — the plaintext password is written in the migration, so anyone with repo access has working credentials to the production CMS.
Saravanan chose to defer this on the day. Not blocking anything, but it should not sit for long.
If there is no change-password UI yet, on the VM:
UPDATE "CMSUser" SET password_hash = crypt('NEW', gen_salt('bf',10)) WHERE email='admin@vajravolt.in';
(pgcrypto bcrypt matches what the CMS auth controller compares against)
Verify the old one stops working:
curl -s -o /dev/null -w '%{http_code}\n' -X POST https://cms-api.vajravolt.com/api/v1/auth/login \
-H 'Content-Type: application/json' -d '{"email":"admin@vajravolt.in","password":"admin123"}'
Expect 401.</body>
migrations/0033_cms_user.up.sql↗ https://cms.vajravolt.com
Vajra Volt Mobile App
· vajra-mobile-app
· by saravanan@scrumclaw.ai
from the conversationclaude: admin@vajravolt.in / admin123 is written in plaintext in migration 0033 and the CMS is now on the public internet — anyone with repo access has working credentials.
saravanan: no pwd change now -
claude: Noted — leaving it, tracked as open.
3d ago
09-07 22:20
09-07 22:20