Merge d163078 into a7c23b1

README.md

@@ -52,10 +52,11 @@ server.register({
 
 option                    | default      | description
 ------------------------- | ------------ | -------------
+**adminPassword**         | -            | Password to login with admin account
 **paths.data**            | `'.hoodie'`  | Data path
 **paths.public**          | `'public'`   | Public path
 **PouchDB**               | –            | [PouchDB constructor](https://pouchdb.com/api.html#defaults). See also [custom PouchDB builds](https://pouchdb.com/2016/06/06/introducing-pouchdb-custom-builds.html).
-**account**               | `{}`         | [Hoodie Account Server](https://github.com/hoodiehq/hoodie-account-server/tree/master/plugin#options) options. `account.admins`, `account.secret` and `account.usersDb` are set based on `db` option above.
+**account**               | `{}`         | [Hoodie Account Server](https://github.com/hoodiehq/hoodie-account-server/tree/master/plugin#options) options. `account.admins` are generated based on `adminPassword` option above. `account.usersDb` is hardcoded to `_users` at this point. `account.secret` is stored in `hoodie-store/hoodie` and will be generated if it does not yet exist.
 **store**                 | `{}`         | [Hoodie Store Server](https://github.com/hoodiehq/hoodie-store-server#options) options. `store.couchdb`, `store.PouchDB` are set based on the `PouchDB` option above. `store.hooks.onPreAuth` is set to bind user authentication for Hoodie Account to Hoodie Store.
 
 ## Testing

lib/config/account/index.js

@@ -4,8 +4,8 @@ var defaultsDeep = require('lodash').defaultsDeep
 
 function accountConfig (state, callback) {
   defaultsDeep(state.config.account, {
-    admins: state.db.admins,
-    secret: state.db.secret,
+    admins: state.admins,
+    secret: state.secret,
     PouchDB: state.config.PouchDB,
     usersDb: '_users'
   })

lib/config/admins.js

@@ -0,0 +1,31 @@
+module.exports = getAdmins
+
+var internals = getAdmins.internals = {}
+internals.Admins = require('pouchdb-admins').admins
+
+function getAdmins (state, callback) {
+  if (!state.config.adminPassword) {
+    state.server.log(['account', 'warn'], 'Admin account disabled: `options.adminPassword` not set')
+    state.admins = {}
+    return process.nextTick(callback)
+  }
+
+  var admins = new internals.Admins({
+    secret: state.secret
+  })
+
+  admins.set('admin', state.config.adminPassword)
+
+  .then(function () {
+    return admins.get('admin')
+  })
+
+  .then(function (doc) {
+    state.admins = {
+      admin: '-pbkdf2-' + doc.derived_key + ',' + doc.salt + ',10'
+    }
+    callback()
+  })
+
+  .catch(callback)
+}