fix(admin): trim login inputs and explicitly match ritadmin / ritadmin2026! credentials
Some checks failed
Deploy RIT Freshers Hub to VPS / Deploy to Live VPS (push) Has been cancelled

This commit is contained in:
Shanmuga Krishnan S M
2026-08-07 14:22:17 +05:30
parent aa18713be7
commit 9357c18d69

View File

@@ -40,11 +40,14 @@ public class AdminController {
@PostMapping("/login") @PostMapping("/login")
public ResponseEntity<Map<String, Object>> login(@RequestBody Map<String, String> payload) { public ResponseEntity<Map<String, Object>> login(@RequestBody Map<String, String> payload) {
String username = payload.get("username"); String username = payload.get("username") != null ? payload.get("username").trim() : "";
String password = payload.get("password"); String password = payload.get("password") != null ? payload.get("password").trim() : "";
Map<String, Object> response = new HashMap<>(); Map<String, Object> response = new HashMap<>();
if (adminUsername.equals(username) && adminPassword.equals(password)) { boolean isUsernameValid = "ritadmin".equalsIgnoreCase(username) || adminUsername.equalsIgnoreCase(username);
boolean isPasswordValid = "ritadmin2026!".equals(password) || adminPassword.equals(password);
if (isUsernameValid && isPasswordValid) {
response.put("success", true); response.put("success", true);
response.put("message", "Admin login successful"); response.put("message", "Admin login successful");
response.put("token", "ADMIN_SESSION_TOKEN_RIT_2026"); response.put("token", "ADMIN_SESSION_TOKEN_RIT_2026");