dev-demo: add agent user to the dev-demo to prevent burning tokens on login attempts

Author: yaroslav8765

AGENTS.md

@@ -10,6 +10,10 @@ Howeverer internally (e.g. in `codeInjector`) adminforth still supports both `np
 
 Never patch anything in `spa_tmp` (e.g. `/tmp/adminforth/<app>/spa_tmp`): no file edits, no `pnpm install`, no own vite or other commands there. `codeInjector` generates it from `adminforth/spa` and the custom components of the app and its plugins, a manual install there drops the packages it adds for plugins. After a change in `spa/package.json` or `spa/tailwind.config.js` the running app breaks until a restart, tell the user to restart it.
 
+## Dev demo login
+
+To log in to the local dev-demo (`http://localhost:3123`) use `agent` as username and `agent` as password. The user is created on start and is exempt from 2FA. Do not use `adminforth`, it may have 2FA set up in the local database.
+
 ## Package names rules
 
 

dev-demo/index.ts

@@ -44,6 +44,7 @@ import mcpAuthSecretsResource from './resources/mcpAuthSecrets.js';
 import { logger } from '../adminforth/modules/logger.js';
 
 import { globalPlugins } from './globalPlugins.js';
+import { AGENT_USER_EMAIL } from './utils.js';
 
 const ADMIN_BASE_URL = '';
 
@@ -460,6 +461,13 @@ if (fileURLToPath(import.meta.url) === path.resolve(process.argv[1])) {
         role: 'superadmin',
       });
     }
+    if (await admin.resource('adminuser').count(Filters.EQ('email', AGENT_USER_EMAIL)) === 0) {
+      await admin.resource('adminuser').create({
+        email: AGENT_USER_EMAIL,
+        password_hash: await AdminForth.Utils.generatePasswordHash(AGENT_USER_EMAIL),
+        role: 'superadmin',
+      });
+    }
     if (await admin.resource('cars_sl').count() === 0) {
       for (let i = 0; i < 100; i++) {
         const engine_type = ENGINE_TYPES[Math.floor(Math.random() * ENGINE_TYPES.length)].value;

dev-demo/resources/configs/twoFactorAuthPluginConfig.ts

@@ -1,6 +1,7 @@
 import TwoFactorsAuthPlugin from "../../../plugins/adminforth-two-factors-auth/index.js";
 import KeyValueAdapterRam from '../../../adapters/adminforth-key-value-adapter-ram/index.js';
 import type { AdminUser } from '../../../adminforth/index.js';
+import { AGENT_USER_EMAIL } from '../../utils.js';
 
 
 
@@ -9,6 +10,7 @@ export default new TwoFactorsAuthPlugin (
         twoFaSecretFieldName: 'secret2fa', 
         timeStepWindow: 1,
         stepUpMfaGracePeriodSeconds: 300,
+        usersFilterToApply: (adminUser: AdminUser) => adminUser.dbUser.email !== AGENT_USER_EMAIL,
         usersFilterToAllowSkipSetup: (adminUser: AdminUser) => {
           // allow skip setup 2FA for users which email is 'adminforth' or 'adminguest'
           return (true);

dev-demo/utils.ts

@@ -4,6 +4,9 @@ import ResourceKeyValueAdapter from '../adapters/adminforth-key-value-adapter-re
 import RAMKeyValueAdapter from '../adapters/adminforth-key-value-adapter-ram/index.js';
 import AdminForthAdapterS3Storage from '../adapters/adminforth-storage-adapter-amazon-s3/index.js'; 
 
+// local user for coding agents, its password is the same as the email, it is exempt from 2FA
+export const AGENT_USER_EMAIL = 'agent';
+
 export const levelDbAdapter = new LevelDBKeyValueAdapter({
   dbPath: './testdb',
 });