2026-05-29 23:58:41 -04:00
|
|
|
---
|
|
|
|
|
name: purge-quick-login-from-loginpage
|
|
|
|
|
classification: fix
|
|
|
|
|
success_metric: |
|
|
|
|
|
pages/login.js no longer ships alice123/bob123 in client HTML; smoke sign-in
|
|
|
|
|
CTA unchanged.
|
2026-06-02 12:01:27 -04:00
|
|
|
status: shipped
|
2026-05-29 23:58:41 -04:00
|
|
|
created: 2026-05-26
|
|
|
|
|
closed: 2026-05-29
|
2026-06-02 12:01:27 -04:00
|
|
|
pr: 56
|
2026-05-29 23:58:41 -04:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# Convoy: purge-quick-login-from-loginpage
|
|
|
|
|
|
2026-06-02 12:01:27 -04:00
|
|
|
**As-shipped:** PR #56 (`e0218e4`, 2026-05-29). Quick Login removed from `pages/login.js` (bundled with scanner a11y polish).
|
|
|
|
|
|
2026-05-29 23:58:41 -04:00
|
|
|
Remove production Quick Login buttons that exposed test-user passwords in
|
|
|
|
|
view-source HTML.
|
|
|
|
|
|
|
|
|
|
## Scope
|
|
|
|
|
|
|
|
|
|
- Delete Quick Login section + `handleQuickLogin` from `pages/login.js`
|
|
|
|
|
- Regression test: no quick-login copy or password literals in rendered output
|
|
|
|
|
|
|
|
|
|
## Out of scope
|
|
|
|
|
|
|
|
|
|
- Rotating alice/bob DB hashes (operators rotate manually if needed)
|
|
|
|
|
- `TESTING_GUIDE.md` dev account table (local QA reference only)
|