deckhearth/.convoys/purge-quick-login-from-loginpage.md
Randall Stillwell 2ea2c877c0 Remove prod Quick Login and finish scanner a11y polish.
Drop alice/bob password prefill from the login page, add a regression
test, and improve bulk-toolbar and disambiguation accessible names.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-29 22:56:59 -05:00

26 lines
698 B
Markdown

---
name: purge-quick-login-from-loginpage
classification: fix
success_metric: |
pages/login.js no longer ships alice123/bob123 in client HTML; smoke sign-in
CTA unchanged.
status: closed
created: 2026-05-26
closed: 2026-05-29
pr: pending
---
# Convoy: purge-quick-login-from-loginpage
Remove production Quick Login buttons that exposed test-user passwords in
view-source HTML.
## Scope
- Delete Quick Login section + `handleQuickLogin` from `pages/login.js`
- Regression test: no quick-login copy or password literals in rendered output
## Out of scope
- Rotating alice/bob DB hashes (operators rotate manually if needed)
- `TESTING_GUIDE.md` dev account table (local QA reference only)