deckhearth/.convoys/purge-quick-login-from-loginpage.md
Randall Stillwell f666a885b9 chore(convoys): mark shipped convoys and refresh ship-readiness
Close stale convoy frontmatter for merged scanner, lint, and hygiene work;
record P1 #11.5 and queued follow-ups as RESOLVED with PR references.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-02 08:48:42 -05:00

28 lines
821 B
Markdown

---
name: purge-quick-login-from-loginpage
classification: fix
success_metric: |
pages/login.js no longer ships alice123/bob123 in client HTML; smoke sign-in
CTA unchanged.
status: shipped
created: 2026-05-26
closed: 2026-05-29
pr: 56
---
# Convoy: purge-quick-login-from-loginpage
**As-shipped:** PR #56 (`e0218e4`, 2026-05-29). Quick Login removed from `pages/login.js` (bundled with scanner a11y polish).
Remove production Quick Login buttons that exposed test-user passwords in
view-source HTML.
## Scope
- Delete Quick Login section + `handleQuickLogin` from `pages/login.js`
- Regression test: no quick-login copy or password literals in rendered output
## Out of scope
- Rotating alice/bob DB hashes (operators rotate manually if needed)
- `TESTING_GUIDE.md` dev account table (local QA reference only)