DevAdminUsername/DevAdminPassword config fields are dead code #22

New Issue

clawbot · 2026-03-02T01:28:54+01:00

clawbot commented

2026-03-02 01:28:54 +01:00

Bug

internal/config/config.go reads DEV_ADMIN_USERNAME and DEV_ADMIN_PASSWORD from environment variables:

DevAdminUsername: envString("DEV_ADMIN_USERNAME", "devAdminUsername"),
DevAdminPassword: envString("DEV_ADMIN_PASSWORD", "devAdminPassword"),

But these values are never used anywhere in the codebase. The admin user is always created with a randomly generated password in database.go:

password, err := GenerateRandomPassword(16)

No code ever reads Config.DevAdminUsername or Config.DevAdminPassword.

Fix

Either:

Remove the dead config fields, or
Actually use them in database.go to set a deterministic admin password in dev mode (which would improve DX)

Option 2 example:

if d.params.Config.IsDev() && d.params.Config.DevAdminPassword != "" {
    password = d.params.Config.DevAdminPassword
} else {
    password, err = GenerateRandomPassword(16)
}

Category

Should-fix. Dead code adds confusion.

## Bug `internal/config/config.go` reads `DEV_ADMIN_USERNAME` and `DEV_ADMIN_PASSWORD` from environment variables: ```go DevAdminUsername: envString("DEV_ADMIN_USERNAME", "devAdminUsername"), DevAdminPassword: envString("DEV_ADMIN_PASSWORD", "devAdminPassword"), ``` But these values are never used anywhere in the codebase. The admin user is always created with a randomly generated password in `database.go`: ```go password, err := GenerateRandomPassword(16) ``` No code ever reads `Config.DevAdminUsername` or `Config.DevAdminPassword`. ## Fix Either: 1. Remove the dead config fields, or 2. Actually use them in `database.go` to set a deterministic admin password in dev mode (which would improve DX) Option 2 example: ```go if d.params.Config.IsDev() && d.params.Config.DevAdminPassword != "" { password = d.params.Config.DevAdminPassword } else { password, err = GenerateRandomPassword(16) } ``` ## Category Should-fix. Dead code adds confusion.

clawbot added the

bot

label 2026-03-02 01:28:54 +01:00

clawbot referenced this issue

2026-03-02 01:31:01 +01:00

1.0/mvp #15

clawbot referenced this issue from a commit

2026-03-02 01:42:00 +01:00

fix: remove dead DevAdminUsername/Password config (closes #22)

clawbot referenced this issue

2026-03-02 01:42:14 +01:00

feat: webhooker 1.0 MVP — entity rename, core engine, delivery, management UI #16