Skip to content

fix(supervise): share auth keys between supervise and user create#53

Open
manavjaiswal wants to merge 1 commit intoagent0ai:mainfrom
manavjaiswal:fix-supervise-shared-auth-store
Open

fix(supervise): share auth keys between supervise and user create#53
manavjaiswal wants to merge 1 commit intoagent0ai:mainfrom
manavjaiswal:fix-supervise-shared-auth-store

Conversation

@manavjaiswal
Copy link
Copy Markdown

@manavjaiswal manavjaiswal commented May 1, 2026

This change makes node space supervise use the same default auth-key store as node space user create, so password verifiers created by the CLI can be opened by the running supervised server.

What changed:

  • supervisor auth-key loading now reuses the shared server-side auth loader
  • node space supervise help/docs now describe the shared auth-store behavior
  • added a regression test for the default auth-key source

How to test:

  1. Start from a clean checkout.
  2. Set CUSTOMWARE_PATH to a real absolute path.
  3. Run node space user create <username> --password <password> --groups _admin.
  4. Run node space supervise HOST=127.0.0.1 PORT=3000.
  5. Open the browser at http://127.0.0.1:3000 and log in with the user you created.
  6. Confirm the login succeeds without having to copy auth keys manually.

Regression coverage:

  • node --test tests/supervise_command_test.mjs

Fixes #52

@manavjaiswal manavjaiswal changed the title Share auth keys between supervise and user create fix(supervise): share auth keys between supervise and user create May 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bug: node space user create can silently seal passwords with auth keys the running supervisor cannot read

1 participant