39 lines
1.2 KiB
JavaScript
39 lines
1.2 KiB
JavaScript
|
import bcrypt from 'bcrypt';
|
||
|
|
import pool from '../config/database.js';
|
||
|
|
|
||
|
|
// Stellt sicher dass mindestens ein SuperAdmin existiert.
|
||
|
|
// Nutzt env SUPERADMIN_EMAIL + SUPERADMIN_PASSWORD beim ersten Start.
|
||
|
|
export async function bootstrapSuperAdmin() {
|
||
|
|
const email = process.env.SUPERADMIN_EMAIL;
|
||
|
|
const password = process.env.SUPERADMIN_PASSWORD;
|
||
|
|
if (!email || !password) {
|
||
|
|
console.warn('[bootstrap] SUPERADMIN_EMAIL/PASSWORD nicht gesetzt - skip');
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
// Auf Datenbank-Bereitschaft warten (max 30s)
|
||
|
|
for (let i = 0; i < 30; i++) {
|
||
|
|
try {
|
||
|
|
await pool.query('SELECT 1');
|
||
|
|
break;
|
||
|
|
} catch {
|
||
|
|
await new Promise(r => setTimeout(r, 1000));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
const [rows] = await pool.query(
|
||
|
|
"SELECT id FROM mitarbeiter WHERE email = ? AND tenant_id IS NULL AND rolle = 'superadmin'",
|
||
|
|
[email]
|
||
|
|
);
|
||
|
|
if (rows.length > 0) {
|
||
|
|
console.log('[bootstrap] SuperAdmin existiert:', email);
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
const hash = await bcrypt.hash(password, 10);
|
||
|
|
await pool.query(
|
||
|
|
`INSERT INTO mitarbeiter (id, tenant_id, email, password_hash, name, rolle, aktiv)
|
||
|
|
VALUES (UUID(), NULL, ?, ?, 'SuperAdmin', 'superadmin', 1)`,
|
||
|
|
[email, hash]
|
||
|
|
);
|
||
|
|
console.log('[bootstrap] SuperAdmin angelegt:', email);
|
||
|
|
}
|