Repository navigation
Issue 6 first login required fields - #68
jonbartels merged 1 commit into
Conversation
4eb8c66 to
2691365
Compare
tonygermano
left a comment
There was a problem hiding this comment.
I'd like to take a look at rolling back this class to what it looked like in 4.0 before they started making the changes that required all of the additional fields. There may be a few things we need to keep, because I think a few extra fields were added, but I know a lot of GUI elements were added or hidden which we don't need or want. We likely don't need the changes that pre-populate the form with values saved in the local java user profile if we aren't requiring the fields, anymore. I think comparing what is there currently to a known desired state is probably easier than trying to slowly undo things piece by piece and likely overlooking something.
My apologies for not including this in the detail of the issue.
tonygermano
left a comment
There was a problem hiding this comment.
I'll open a new issue for the rollback.
Signed-off-by: Jon Bartels <jon.bartels@teladochealth.com>
2691365 to
1bd8e95
Compare
…ap.json From 4.7.0 the engine no longer seeds a new database with admin/admin. It takes server.initialadminpassword from conf/mirth.properties, or else generates a random password and logs it once. For a new install the OpenShare console now generates that password, shows it to the user once, and ships it in the per-server bootstrap.json as engine.initialAdminPassword. The install action that already unpacks the plugin sidecar and copies bootstrap.json now also writes that value into mirth.properties, before the service is installed and started, so the engine's first start creates the database with it. The OpenShare plugin blanks the property again after that start (mirthsync-gateway-plugin OpenIntegrationEngine#68). An existing database ignores it. The install4j runtime has no JSON parser, so the action reads only this one string field; the console generates it from characters that need no escaping in JSON or a .properties value. A value outside the characters a .properties value carries literally is logged and skipped rather than written, so the engine falls back to its own logged random password. The value itself is never logged. The step runs after the bootstrap.json copy, so it can never block registration. Tested: an unsigned Unix installer (install4jc -u -b 42) installed unattended in a Java 21 container with the PR OpenIntegrationEngine#68 plugin as the sidecar. The engine came up as 4.7.0, the console-style password signed in (200), admin/admin was refused (401), the engine logged no random password, and the plugin had blanked the property. The password appeared in neither the install log nor the engine log.
Resolves #6
First login and user edit only require username and password