Skip to content

Conversation

@Casmo
Copy link
Contributor

@Casmo Casmo commented Dec 19, 2025

Aanpassingen die nodig zijn voor de demo.

  • Geen standaard users meer aanmaken bij backstage:install
  • Translation configs standaard uit cms

Note

Installer now prompts to create a user, default seeded users and translation config generation are removed, and MediaResource is disabled in CMS resources.

  • Installer (BackstageServiceProvider)
    • Adds interactive user creation during backstage:install (hashes password).
    • Removes translation config generation/publishing and related helpers.
    • Minor copy tweaks and ensures AUTH_MODEL is appended to .env.
  • Seeders (database/seeders/BackstageSeeder.php, packages/core/database/seeders/BackstageSeeder.php)
    • Stop creating hardcoded default User records; drop User import.
  • CMS Config (packages/core/config/backstage/cms.php)
    • Comments out Backstage\Resources\MediaResource::class from registered resources.

Written by Cursor Bugbot for commit f64d612. This will update automatically on new commits. Configure here.

Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is the final PR Bugbot will review for you during this billing cycle

Your free Bugbot reviews will reset on January 14

Details

Your team is on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle for each member of your team.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

User::factory()->create([
'name' => $user,
'email' => $email,
'password' => Hash::make($password),
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Password double-hashed causing user login failure

The User model has a 'password' => 'hashed' cast that automatically hashes passwords when set. The new user creation code calls Hash::make($password) before passing the password to the factory, causing the password to be hashed twice. This makes the password unusable since authentication will compare against a double-hashed value. The password should be passed as plain text (like in UserSeeder) and let the model's cast handle hashing automatically.

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants