From 4c67998f128367f229767a2fb217fd14925556aa Mon Sep 17 00:00:00 2001
From: Pavlo Kulyk <pkulyk@devforth.io>
Date: Fri, 30 Jan 2026 15:38:30 +0200
Subject: [PATCH] feat: add default user detection and private IP check to
 AdminForthRestAPI

---
 adminforth/modules/restApi.ts             | 10 ++++++++++
 adminforth/spa/src/components/Sidebar.vue |  6 ++++++
 adminforth/types/Common.ts                |  1 +
 3 files changed, 17 insertions(+)

diff --git a/adminforth/modules/restApi.ts b/adminforth/modules/restApi.ts
index 78a8c946..f4ddc332 100644
--- a/adminforth/modules/restApi.ts
+++ b/adminforth/modules/restApi.ts
@@ -376,6 +376,14 @@ export default class AdminForthRestAPI implements IAdminForthRestAPI {
           }
         }
 
+      let defaultUserExists = false;
+        if (username === 'adminforth') {
+          defaultUserExists = true;
+        }
+      const headers = response.getHeaders?.() || {};
+      const clientIp = this.adminforth.auth.getClientIp(headers);
+      const isPrivateIP = clientIp === null ? true :false;
+
         const publicPart = {
           brandName: this.adminforth.config.customization.brandName,
           usernameFieldName: usernameColumn.label,
@@ -404,6 +412,8 @@ export default class AdminForthRestAPI implements IAdminForthRestAPI {
           globalInjections: this.adminforth.config.customization.globalInjections,
           userFullnameField: this.adminforth.config.auth.userFullNameField,
           settingPages: settingPages,
+          defaultUserExists: defaultUserExists,
+          isPrivateIP: isPrivateIP,
         }
 
         // translate menu labels
diff --git a/adminforth/spa/src/components/Sidebar.vue b/adminforth/spa/src/components/Sidebar.vue
index 2881f182..0c9ade0b 100644
--- a/adminforth/spa/src/components/Sidebar.vue
+++ b/adminforth/spa/src/components/Sidebar.vue
@@ -51,6 +51,11 @@
         </div>
       </div>
 
+     <div v-if="coreStore.config.defaultUserExists&&!coreStore.config.isPrivateIP" class="p-4 mb-4 text-white rounded-lg bg-red-700/80 fill-white text-sm"> 
+      <IconExclamationCircleOutline class="inline-block align-text-bottom mr-0,5 w-5 h-5" />
+      Default user <strong>"adminforth"</strong> detected. Delete it and create your own account.
+    </div>
+
       <ul class="af-sidebar-container space-y-2 font-medium" >
       <template v-if="!iconOnlySidebarEnabled || !isSidebarIconOnly" v-for="(item, i) in coreStore.menu" :key="`menu-${i}`">
           <div v-if="item.type === 'divider'" class="border-t border-lightSidebarDevider dark:border-darkSidebarDevider"></div>
@@ -300,6 +305,7 @@ import { getIcon, verySimpleHash, loadFile, getCustomComponent } from '@/utils';
 import { Tooltip } from '@/afcl';
 import type { AnnouncementBadgeResponse } from '@/types/Common';
 import { useAdminforth } from '@/adminforth';
+import { IconExclamationCircleOutline} from '@iconify-prerendered/vue-flowbite';
 
 const { menu } = useAdminforth();
 
diff --git a/adminforth/types/Common.ts b/adminforth/types/Common.ts
index 55f1f1c5..6242c215 100644
--- a/adminforth/types/Common.ts
+++ b/adminforth/types/Common.ts
@@ -1110,6 +1110,7 @@ export interface AdminForthConfigForFrontend {
   loginBackgroundImage: string,
   loginBackgroundPosition: string,
   removeBackgroundBlendMode: boolean,
+  defaultUserExists?: boolean;
   title?: string,
   demoCredentials?: string,
   loginPromptHTML?: string | (() => string | Promise<string> | void | Promise<void> | Promise<undefined>) | undefined