AstrBot 4.24.3__tar.gz → 4.24.4__tar.gz

{astrbot-4.24.3 → astrbot-4.24.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: AstrBot
-Version: 4.24.3
+Version: 4.24.4
 Summary: Easy-to-use multi-platform LLM chatbot and development framework
 Project-URL: Repository, https://github.com/AstrBotDevs/AstrBot
 License: AGPL-3.0-or-later

astrbot-4.24.4/astrbot/cli/__init__.py

@@ -0,0 +1 @@
+__version__ = "4.24.4"

{astrbot-4.24.3 → astrbot-4.24.4}/astrbot/core/config/default.py

@@ -5,7 +5,7 @@ import os
 from astrbot.core.computer.booters.cua_defaults import CUA_DEFAULT_CONFIG
 from astrbot.core.utils.astrbot_path import get_astrbot_data_path
 
-VERSION = "4.24.3"
+VERSION = "4.24.4"
 DB_PATH = os.path.join(get_astrbot_data_path(), "data_v4.db")
 PERSONAL_WECHAT_CONFIG_METADATA = {
     "weixin_oc_base_url": {

{astrbot-4.24.3 → astrbot-4.24.4}/astrbot/dashboard/routes/auth.py

@@ -29,6 +29,15 @@ DASHBOARD_JWT_COOKIE_MAX_AGE = 7 * 24 * 60 * 60
 SKIP_DEFAULT_PASSWORD_AUTH_ENV = "ASTRBOT_DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH"
 SKIP_DEFAULT_PASSWORD_AUTH_ENV_LEGACY = "DASHBOARD_SKIP_DEFAULT_PASSWORD_AUTH"
 LOCAL_DASHBOARD_HOSTS = {"127.0.0.1", "localhost", "::1"}
+DEFAULT_PASSWORD_LOGIN_FAILURE_MESSAGE = (
+    "Login failed. If this is your first time using AstrBot, the old default "
+    "astrbot password has been replaced by a random strong password printed in "
+    "the startup logs. Check the initial password in the logs and try again. "
+    "Learn more: https://docs.astrbot.app/en/faq.html\n\n"
+    "登录失败。如果您是初次使用，旧版默认 astrbot 密码已改为启动日志中输出的"
+    "随机强密码。请使用日志中提供的的初始密码来登录。了解更多："
+    "https://docs.astrbot.app/faq.html"
+)
 
 
 class AuthRoute(Route):
@@ -170,6 +179,8 @@ class AuthRoute(Route):
             self._set_dashboard_jwt_cookie(response, token)
             return response
         await asyncio.sleep(3)
+        if req_password == "astrbot":
+            return Response().error(DEFAULT_PASSWORD_LOGIN_FAILURE_MESSAGE).__dict__
         return Response().error("用户名或密码错误").__dict__
 
     async def logout(self):

astrbot-4.24.4/dashboard-artifact/unpacked/dist/assets/version

@@ -0,0 +1 @@
+v4.24.4

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/deploy/astrbot/cli.md

@@ -86,7 +86,7 @@ If there are no errors, you will see a log message similar to `🌈 Dashboard st
 > [!TIP]
 > If you are deploying AstrBot on a server, you need to replace `localhost` with your server's IP address.
 >
-> The default username and password are `astrbot` and `astrbot`.
+> New users must use the random password printed in the startup logs to log in for the first time. Use the username shown in the logs (usually `astrbot`) and change it after first login.
 
 
 Next, you need to deploy any messaging platform to use AstrBot on that platform.

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/deploy/astrbot/compshare.md

@@ -35,7 +35,7 @@ You can find the public IP in Console -> Basic Network (Public).
 
 ![WebUI](https://www-s.ucloud.cn/2025/07/7e9fc6edc1dfa916abc069f4cecc24cf_1753940381771.png)
 
-Login with username `astrbot` and password `astrbot`.
+Use the random password printed in startup logs for first-time login, and use the username shown in the logs (usually `astrbot`). Change it immediately after login.
 
 After logging in, you can reset your password and continue setup.
 

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/deploy/astrbot/docker.md

@@ -84,7 +84,7 @@ If there are no errors, you will see a log message similar to `🌈 Dashboard st
 > [!TIP]
 > Since Docker isolates the network environment, you cannot use `localhost` to access the dashboard.
 >
-> The default username and password are `astrbot` and `astrbot`.
+> New users must use the random password printed in the startup logs to log in for the first time. Use the username shown in the logs (usually `astrbot`) and change the password after first login.
 >
 > If deployed on a cloud server, you need to open ports `6180-6200` and `11451` in the cloud provider's console.
 

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/deploy/astrbot/kubernetes.md

@@ -194,4 +194,4 @@ Edit the `02-deployment.yaml` file and add `volumes` and `volumeMounts` under `s
 
 After deploying and exposing the service, you can access the AstrBot admin panel through the corresponding IP and port.
 
-> The default username and password are `astrbot` and `astrbot`.
+> New users must use the random password printed in the startup logs for the first login. Use the username shown in the logs (usually `astrbot`) and change it after logging in.

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/deploy/astrbot/launcher.md

@@ -66,7 +66,7 @@ If everything works, you will see AstrBot logs.
 Without errors, you should see a log like `🌈 Management panel started, accessible at` with several URLs. Open one URL to access AstrBot WebUI.
 
 > [!TIP]
-> Default username and password: `astrbot` / `astrbot`.
+> First-time logins use the random password generated on startup and printed to logs. Use that password (and the username shown in the logs, usually `astrbot`) to log in, then change it immediately.
 >
 > If WebUI returns 404:
 > Download `dist.zip` from [release](https://github.com/AstrBotDevs/AstrBot/releases), extract it into `AstrBot/data`, then restart the computer if needed.

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/dev/astrbot-config.md

@@ -116,7 +116,7 @@ The default AstrBot configuration is as follows:
     "dashboard": {
         "enable": True,
         "username": "astrbot",
-        "password": "77b90590a8945a7d36c963981a307dc9",
+        "password": "<your_password_md5>",
         "jwt_secret": "",
         "host": "0.0.0.0",
         "port": 6185,
@@ -492,11 +492,11 @@ List of addresses that bypass the proxy. E.g., `["localhost", "127.0.0.1"]`.
 
 AstrBot WebUI configuration.
 
-Please do not change the `password` value arbitrarily. It is an `md5` encoded password. Change the password in the control panel.
+Please do not change the `password` value arbitrarily. It is an `md5` encoded password generated from the random initial password. Check the startup logs for that initial password on first run, then change it in the control panel.
 
 - `enable`: Whether to enable the AstrBot WebUI. Default is `true`.
-- `username`: Username for the AstrBot WebUI. Default is `astrbot`.
-- `password`: Password for the AstrBot WebUI. Default is the `md5` encoded value of `astrbot`. Do not modify directly unless you know what you are doing.
+- `username`: Username for the AstrBot WebUI.
+- `password`: Password for the AstrBot WebUI. It is initialized from a random password generated on first startup (logged at startup). Do not modify directly unless you know what you are doing.
 - `jwt_secret`: JWT secret key. AstrBot generates this randomly at initialization. Do not modify unless you know what you are doing.
 - `host`: Address the AstrBot WebUI listens on. Default is `0.0.0.0`.
 - `port`: Port the AstrBot WebUI listens on. Default is `6185`.

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/faq.md

@@ -6,17 +6,69 @@
 
 Download `dist.zip` from the [release](https://github.com/AstrBotDevs/AstrBot/releases) page, extract it, and move it to `AstrBot/data`. If it still doesn't work, try restarting your computer (based on community feedback).
 
-### Forgot Dashboard Password
+### First Login Account and Random Password
+
+On first startup, the WebUI account is `astrbot` by default, and the default password is randomly generated (it is not a fixed hardcoded value). Check the startup logs and log in with the random initial password shown there:
+
+```text
+[00:27:40.590] [Core] [INFO] [dashboard.server:523]:
+ ✨✨✨
+  AstrBot v4.24.3 WebUI is ready
 
-If you forgot your AstrBot dashboard password, you can modify the `"dashboard"` field in the `AstrBot/data/cmd_config.json` configuration file, where `"username"` is your username and `"password"` is your password encrypted with MD5.
+   ➜  Local: http://localhost:6185
+   ➜  Initial username: astrbot
+   ➜  Initial password: UiYVpZxnW8k22IWqf0ru5pOy
+   ➜  Change it after logging in
+ ✨✨✨
+Set dashboard.host in data/cmd_config.json to enable remote access.
+```
 
-To modify your account credentials, follow these steps:
+The random initial password may be different each first startup, so please change it as soon as possible in WebUI settings after logging in.
+
+### Forgot Dashboard Password
 
-1. Modify the `"username"` field, keeping the `""` quotation marks. If you don't want to change the username, skip this step
-2. Visit the website: [Online MD5 Generator](https://www.metools.info/code/c26.html)
-3. Enter your new password in the input text box
-4. Select MD5 encryption (32-bit), make sure to choose the 32-bit option
-5. Paste the converted string into the configuration file, keeping the `""` quotation marks
+If you forgot your AstrBot dashboard password, find the `"dashboard"` field in `AstrBot/data/cmd_config.json`, for example:
+
+```json
+  "dashboard": {
+    "enable": true,
+    "username": "astrbot",
+    "password": "81e0c3dxxxxxxxxxxx78862e78",
+    "pbkdf2_password": "pbkdf2_sha256$600000$1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+    "password_storage_upgraded": true,
+    "password_change_required": true,
+    "jwt_secret": "5e1b0280bcxxxxxxxxxxxxxxxxf4a",
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
+
+Delete the `username`, `password`, `pbkdf2_password`, `password_storage_upgraded`, `password_change_required`, and `jwt_secret` fields (with their values), then save.
+The segment should look like:
+
+```json
+  "dashboard": {
+    "enable": true,
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
+
+After restart, AstrBot will automatically generate a random password with the fixed username `astrbot`; check the startup logs.
 
 ## Bot Core Related
 

{astrbot-4.24.3 → astrbot-4.24.4}/docs/en/use/webui.md

@@ -13,7 +13,7 @@ After starting AstrBot, you can access the admin panel by visiting `http://local
 
 ## Login
 
-The default username and password are both `astrbot`.
+For first-time login, AstrBot generates a random initial password and prints it in startup logs. Please read the startup log line containing the WebUI credential and use that password to log in (username is usually `astrbot`).
 
 ## ChatUI
 

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/deploy/astrbot/cli.md

@@ -85,7 +85,7 @@ python main.py
 > [!TIP]
 > 如果你正在服务器上部署 AstrBot，需要将 `localhost` 替换为你的服务器 IP 地址。
 >
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。
 
 
 接下来，你需要部署任何一个消息平台，才能够实现在消息平台上使用 AstrBot。

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/deploy/astrbot/compshare.md

@@ -34,7 +34,7 @@ Both services started in the background.
 
 ![WebUI 界面](https://www-s.ucloud.cn/2025/07/7e9fc6edc1dfa916abc069f4cecc24cf_1753940381771.png)
 
-使用用户名：astrbot 和密码 astrbot 进行登录。
+首次登录时请使用启动日志内的随机初始密码（用户名通常是 astrbot），登录后请立即修改密码。
 
 
 登录成功后，可以重新设置密码，并进入 AstrBot 的页面。
@@ -86,4 +86,4 @@ AstrBot 支持接入优云智算提供的模型 API。
 
 ## 更多功能
 
-更多功能请参考 [AstrBot 官方文档](https://docs.astrbot.app)。
+更多功能请参考 [AstrBot 官方文档](https://docs.astrbot.app)。

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/deploy/astrbot/docker.md

@@ -98,7 +98,7 @@ sudo docker logs -f astrbot
 > [!TIP]
 > 由于 Docker 隔离了网络环境，所以不能使用 `localhost` 访问管理面板。
 >
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。
 >
 > 如果部署在云服务器上，需要在相应厂商控制台里放行对应端口。
 

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/deploy/astrbot/kubernetes.md

@@ -194,4 +194,4 @@ image: m.daocloud.io/docker.io/soulter/astrbot:latest
 
 部署并暴露服务后，您就可以通过相应的 IP 和端口访问 AstrBot 管理面板了。
 
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/deploy/astrbot/launcher.md

@@ -64,7 +64,7 @@ MacOS 用户下载安装好后，可能会遇到 "已损坏，无法打开" 的
 如果没有报错，你会看到一条日志显示类似 `🌈 管理面板已启动，可访问` 并附带了几条链接。打开其中一个链接即可访问 AstrBot 管理面板。
 
 > [!TIP]
-> 默认用户名和密码是 `astrbot` 和 `astrbot`。
+> 首次登录请使用启动日志中打印的随机初始密码（用户名通常为 `astrbot`）。登录后请立即修改密码。
 >
 > **当管理面板打开时遇到 404 错误：**
 > 在 [release](https://github.com/AstrBotDevs/AstrBot/releases) 页面下载dist.zip，解压拖到 AstrBot/data 下。还不行请重启电脑（来自群里的反馈）
@@ -98,4 +98,4 @@ windows 搜索 Python，打开文件位置：
 
 **方法 2:**
 
-重装 python，并且在安装时勾选 `Add Python to PATH`，然后重启电脑。
+重装 python，并且在安装时勾选 `Add Python to PATH`，然后重启电脑。

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/dev/astrbot-config.md

@@ -116,7 +116,7 @@ AstrBot 默认配置如下：
     "dashboard": {
         "enable": True,
         "username": "astrbot",
-        "password": "77b90590a8945a7d36c963981a307dc9",
+        "password": "<your_password_md5>",
         "jwt_secret": "",
         "host": "0.0.0.0",
         "port": 6185,
@@ -492,11 +492,11 @@ HTTP 代理。如 `http://localhost:7890`。
 
 AstrBot WebUI 配置。
 
-请不要随意修改 `password` 的值。它是一个经过 `md5` 编码的密码。请在控制面板修改密码。
+请不要随意修改 `password` 的值。它是随机初始密码经过 `md5` 编码后的值。首次启动时请在日志中获取初始密码，并在控制面板中修改。
 
 - `enable`: 是否启用 AstrBot WebUI。默认为 `true`。
-- `username`: AstrBot WebUI 的用户名。默认为 `astrbot`。
-- `password`: AstrBot WebUI 的密码。默认为 `astrbot` 的 `md5` 编码值。请勿直接修改，除非您知道自己在做什么。
+- `username`: AstrBot WebUI 的用户名。
+- `password`: AstrBot WebUI 的密码。首次启动会随机生成初始密码（已在日志中打印），这里保存的是该密码的 `md5` 值。请勿直接修改，除非您知道自己在做什么。
 - `jwt_secret`: JWT 的密钥。AstrBot 会在初始化时随机生成。请勿修改，除非您知道自己在做什么。
 - `host`: AstrBot WebUI 监听的地址。默认为 `0.0.0.0`。
 - `port`: AstrBot WebUI 监听的端口。默认为 `6185`。

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/faq.md

@@ -6,17 +6,68 @@
 
 在 [release](https://github.com/AstrBotDevs/AstrBot/releases) 页面下载 `dist.zip`，解压拖到 `AstrBot/data` 下。还不行请重启电脑（来自群里的反馈）
 
+
+### 首次登录的默认账号和随机密码
+
+首次启动时，WebUI 的默认账号为 `astrbot`，默认密码会随机生成，不会写死为固定值。请在启动日志中查找以下内容并使用日志中的随机初始密码登录：
+
+```text
+[00:27:40.590] [Core] [INFO] [dashboard.server:523]:
+ ✨✨✨
+  AstrBot v4.24.3 WebUI is ready
+
+   ➜  Local: http://localhost:6185
+   ➜  Initial username: astrbot
+   ➜  Initial password: UiYVpZxnW8k22IWqf0ru5pOy
+   ➜  Change it after logging in
+ ✨✨✨
+Set dashboard.host in data/cmd_config.json to enable remote access.
+```
+
 ### 管理面板的密码忘记了
 
-如果你忘记了 AstrBot 管理面板的密码，你可以在 `AstrBot/data/cmd_config.json` 配置文件中找到 `"dashboard"` 字段进行修改，其中 `"username"` 是你的用户名，`"password"` 是你的密码（经过 MD5 加密）。
+如果你忘记了 AstrBot 管理面板的密码，你可以在 `AstrBot/data/cmd_config.json` 配置文件中找到 `"dashboard"` 字段，如下：
+
+```json
+  "dashboard": {
+    "enable": true,
+    "username": "astrbot",
+    "password": "81e0c3dxxxxxxxxxxx78862e78",
+    "pbkdf2_password": "pbkdf2_sha256$600000$1xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+    "password_storage_upgraded": true,
+    "password_change_required": true,
+    "jwt_secret": "5e1b0280bcxxxxxxxxxxxxxxxxf4a",
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
 
-如果想要修改账号密码，你可以这样做：
+删除 `username`, `password`, `pbkdf2_password`, `password_storage_upgraded`, `password_change_required`, `jwt_secret` 五个字段（连同值一起），然后保存。上述片段修改类似如下：
+
+
+```json
+  "dashboard": {
+    "enable": true,
+    "host": "127.0.0.1",
+    "port": 6185,
+    "disable_access_log": true,
+    "ssl": {
+      "enable": false,
+      "cert_file": "",
+      "key_file": "",
+      "ca_certs": ""
+    }
+  },
+```
 
-1. 修改 `"username"` 字段，注意保留 `""`；如果不想修改用户名，可以不修改
-2. 进入网站：[在线 MD5 生成](https://www.metools.info/code/c26.html)
-3. 在转换前文本框输入你的新密码
-4. 选择 MD5 加密（32 位），请确认选择 32 位选项
-5. 将转换后的字符粘贴至配置文件，注意保留 `""`, 且字母使用小写
+重启后 AstrBot 将会自动生成随机的密码以及固定的用户名 `astrbot`，请在日志查看。
 
 ## AstrBot 使用相关
 

{astrbot-4.24.3 → astrbot-4.24.4}/docs/zh/use/webui.md

@@ -13,7 +13,7 @@ AstrBot 管理面板具有管理插件、查看日志、可视化配置、查看
 
 ## 登录
 
-默认用户名和密码是 `astrbot` 和 `astrbot`。
+新用户首次登录时，AstrBot 会生成一个随机初始密码并写入启动日志。请先在启动日志中查找并使用该密码登录（用户名通常为 `astrbot`），登录后请立即修改密码。
 
 ## ChatUI
 

{astrbot-4.24.3 → astrbot-4.24.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "AstrBot"
-version = "4.24.3"
+version = "4.24.4"
 description = "Easy-to-use multi-platform LLM chatbot and development framework"
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

astrbot-4.24.3/astrbot/cli/__init__.py

@@ -1 +0,0 @@
-__version__ = "4.24.3"

astrbot-4.24.3/dashboard-artifact/unpacked/dist/assets/version

@@ -1 +0,0 @@
-v4.24.3