71 lines
2.1 KiB
Go
71 lines
2.1 KiB
Go
|
package main
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"flag"
|
||
|
|
"fmt"
|
||
|
|
"strings"
|
||
|
|
"time"
|
||
|
|
|
||
|
|
"apps/backend/internal/config"
|
||
|
|
|
||
|
|
"github.com/zeromicro/go-zero/core/conf"
|
||
|
|
"go.mongodb.org/mongo-driver/bson"
|
||
|
|
"go.mongodb.org/mongo-driver/mongo"
|
||
|
|
"go.mongodb.org/mongo-driver/mongo/options"
|
||
|
|
"golang.org/x/crypto/bcrypt"
|
||
|
|
)
|
||
|
|
|
||
|
|
// seeder is intentionally explicit: a deployment must provide its own admin
|
||
|
|
// password rather than receiving a committed default credential.
|
||
|
|
func main() {
|
||
|
|
configFile := flag.String("f", "etc/gateway.yaml", "config file")
|
||
|
|
flag.Parse()
|
||
|
|
|
||
|
|
var c config.Config
|
||
|
|
conf.MustLoad(*configFile, &c)
|
||
|
|
c.ApplyEnv()
|
||
|
|
password := c.Seed.AdminPassword
|
||
|
|
if len(password) < 12 || strings.Contains(password, "REPLACE_WITH") {
|
||
|
|
panic("Seed.AdminPassword in gateway.yaml must be at least 12 characters")
|
||
|
|
}
|
||
|
|
ctx, cancel := context.WithTimeout(context.Background(), 20*time.Second)
|
||
|
|
defer cancel()
|
||
|
|
client, err := mongo.Connect(ctx, options.Client().ApplyURI(c.Mongo.URI))
|
||
|
|
if err != nil {
|
||
|
|
panic(err)
|
||
|
|
}
|
||
|
|
defer client.Disconnect(context.Background())
|
||
|
|
|
||
|
|
hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
|
||
|
|
if err != nil {
|
||
|
|
panic(err)
|
||
|
|
}
|
||
|
|
now := time.Now().UTC().UnixNano()
|
||
|
|
admin := bson.M{
|
||
|
|
"uid": int64(1_000_000),
|
||
|
|
"tenant_id": "default",
|
||
|
|
"email": "admin@haixun.local",
|
||
|
|
"display_name": "Harbor Admin",
|
||
|
|
"roles": []string{"admin", "member"},
|
||
|
|
"status": "active",
|
||
|
|
"email_verified": true,
|
||
|
|
"email_verified_at": now,
|
||
|
|
"invite_code": "SEEDADMIN",
|
||
|
|
"password_hash": string(hash),
|
||
|
|
"timezone": "Asia/Taipei",
|
||
|
|
"created_at": now,
|
||
|
|
"updated_at": now,
|
||
|
|
}
|
||
|
|
db := client.Database(c.Mongo.Database)
|
||
|
|
_, err = db.Collection("members").UpdateOne(ctx, bson.M{"uid": admin["uid"]}, bson.M{"$setOnInsert": admin}, options.Update().SetUpsert(true))
|
||
|
|
if err != nil {
|
||
|
|
panic(err)
|
||
|
|
}
|
||
|
|
_, err = db.Collection("counters").UpdateOne(ctx, bson.M{"_id": "member_uid"}, bson.M{"$setOnInsert": bson.M{"seq": int64(1_000_000)}}, options.Update().SetUpsert(true))
|
||
|
|
if err != nil {
|
||
|
|
panic(err)
|
||
|
|
}
|
||
|
|
fmt.Printf("seeded admin %s\n", strings.TrimSpace(admin["email"].(string)))
|
||
|
|
}
|