feat: add one-click dev login buttons

create-a-container/public/style.css

@@ -220,7 +220,7 @@ select:focus {
 }
 
 .signup-section {
-    margin-top: 1.5rem;
+    margin-top: 0;
 }
 
 /* Sidebar styling */

create-a-container/routers/login.js

@@ -3,16 +3,67 @@ const router = express.Router();
 const { User, Setting } = require('../models');
 const { isSafeRelativeUrl } = require('../utils');
 
+const isDev = process.env.NODE_ENV !== 'production';
+
 // GET / - Display login form
 router.get('/', (req, res) => {
   res.render('login', {
     successMessages: req.flash('success'),
     errorMessages: req.flash('error'),
     warningMessages: req.flash('warning'),
-    redirect: req.query.redirect || '/'
+    redirect: req.query.redirect || '/',
+    isDev
   });
 });
 
+// POST /dev - One-click dev login (non-production only)
+if (isDev) {
+  router.post('/dev', async (req, res) => {
+    const isAdmin = req.body.role === 'admin';
+    const uid = isAdmin ? 'dev-admin' : 'dev-user';
+
+    let user = await User.findOne({
+      where: { uid },
+      include: [{ association: 'groups' }]
+    });
+
+    if (!user) {
+      user = await User.create({
+        uidNumber: await User.nextUidNumber(),
+        uid,
+        givenName: 'Dev',
+        sn: isAdmin ? 'Admin' : 'User',
+        cn: isAdmin ? 'Dev Admin' : 'Dev User',
+        mail: `${uid}@localhost`,
+        userPassword: 'dev-password-not-used',
+        status: 'active',
+        homeDirectory: `/home/${uid}`,
+      });
+
+      // The User afterCreate hook auto-adds the first user to sysadmins.
+      // Adjust group membership to match the requested role.
+      const { Group } = require('../models');
+      const adminGroup = await Group.findByPk(2000);
+      if (adminGroup) {
+        if (isAdmin) {
+          await user.addGroup(adminGroup);
+        } else {
+          await user.removeGroup(adminGroup);
+        }
+      }
+
+      user = await User.findOne({
+        where: { uid },
+        include: [{ association: 'groups' }]
+      });
+    }
+
+    req.session.user = user.uid;
+    req.session.isAdmin = user.groups?.some(g => g.isAdmin) || false;
+    req.session.save(() => res.redirect('/'));
+  });
+}
+
 // POST / - Handle login submission
 router.post('/', async (req, res) => {
   const { username, password } = req.body;

create-a-container/views/login.ejs

@@ -47,6 +47,20 @@
             <input type="submit" value="Login" id="loginButton">
         </form>
 
+        <% if (isDev) { %>
+            <hr>
+            <div class="signup-section" style="display: flex; gap: 8px; justify-content: center;">
+                <form method="POST" action="/login/dev" style="flex: 1;">
+                    <input type="hidden" name="role" value="admin">
+                    <input type="submit" value="Login as Admin" style="margin-top: 0;">
+                </form>
+                <form method="POST" action="/login/dev" style="flex: 1;">
+                    <input type="hidden" name="role" value="user">
+                    <input type="submit" value="Login as User" style="margin-top: 0;">
+                </form>
+            </div>
+        <% } %>
+
         <!-- Loading banner for 2FA waiting -->
         <div id="loadingBanner" class="alert alert-info" style="display: none;">
             <strong>⏳ Waiting for authentication...</strong>