# HG changeset patch
# User Sebastien Jodogne <s.jodogne@gmail.com>
# Date 1786834232 -7200
# Node ID 765febef954081b3a0f41ba0fadb0a1722bed3d1
# Parent  0743d0bd2a60f5bb5eb4892ca0ec750d5cc74023
added well-known, insecure credentials

diff -r 0743d0bd2a60 -r 765febef9540 OrthancServer/Sources/OrthancConfiguration.cpp
--- a/OrthancServer/Sources/OrthancConfiguration.cpp	Sat Aug 15 23:30:09 2026 +0200
+++ b/OrthancServer/Sources/OrthancConfiguration.cpp	Sun Aug 16 00:50:32 2026 +0200
@@ -916,8 +916,9 @@
           httpServer.RegisterUser(username.c_str(), password.c_str());
           hasUser = true;
 
-          if ((username == "orthanc" && password == "orthanc") ||
-              (username == "alice" && password == "orthanctest"))
+          if ((username == "orthanc" && password == "orthanc") ||    // Used in some Docker images
+              (username == "alice" && password == "orthanctest") ||  // Used in the integration tests
+              (username == "alice" && password == "alicePassword"))  // Suggestion in the Debian packages
           {
             LOG(WARNING) << "====> Your configuration contains a username/password pair with well-known credentials "
                          << "(check out username \"" << username << "\" in option \"" << REGISTERED_USERS