lobstakit-cloud 1.0.10 → 1.0.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lobstakit-cloud",
-  "version": "1.0.10",
+  "version": "1.0.11",
   "description": "LobstaKit Cloud — Setup wizard and management for LobstaCloud gateways",
   "main": "server.js",
   "bin": {

package/public/js/login.js

@@ -30,16 +30,7 @@ async function checkAuth() {
             window.location.href = '/index.html'; // Go to setup
             return;
         }
-        // Pre-fill email if stored
-        if (status.email) {
-            const emailEl = document.getElementById('email');
-            if (emailEl) {
-                emailEl.value = status.email;
-                // Focus password field instead since email is pre-filled
-                const pwEl = document.getElementById('password');
-                if (pwEl) pwEl.focus();
-            }
-        }
+        // Don't pre-fill email — /api/status returns masked email which confuses users
     } catch (e) {
         // Can't reach server — stay on login page
     }

package/server.js

@@ -138,11 +138,9 @@ app.post('/api/auth/setup', (req, res) => {
     }
   }
 
-  // Fallback to provision email if not provided
-  if (!email) {
-    if (provision && provision.email) {
-      email = provision.email;
-    }
+  // Prefer provision email over form value (form may contain masked email from pre-fill)
+  if (provision && provision.email) {
+    email = provision.email;
   }
 
   if (!email || !email.includes('@')) {
@@ -311,7 +309,7 @@ app.get('/api/provision', (req, res) => {
     const setupNotComplete = !lobstaConfig.passwordHash;
     const response = {
       provisioned: true,
-      email: isAuthenticated ? (provision.email || null) : maskEmail(provision.email || ''),
+      email: (isAuthenticated || setupNotComplete) ? (provision.email || null) : maskEmail(provision.email || ''),
       subdomain: provision.subdomain || null,
       plan: provision.plan || null,
     };