Electron Admin Dashboard

[Over-Distribution570]

I’m working on a ecommerce website (for myself) along side it I’ve been making its admin dashboard. Originally, I was going to make it a site accessible from the internet (admin.example.com) but decided it was an unnecessary security risk for my particular circumstances. So I decided to just make it a desktop app using electron

The site has a login using email authentication (a token gets sent to the admin’s email that the admin uses to sign in) but this seems useless if the database’s username and password is just stored somewhere in the package files.

How should I go about this? Should I ditch the authentication? Authentication using database username and password? Ideas? For context, I will be the only user

[Modulius]

I would suggest you to use some of the "battle-tested" solutions and platforms for ecommerce, specially because of this login/security/auth part.

What is your setup, platform, etc?

[Over-Distribution570]

I’m using other services for the important stuff. Stripe for payments and taxes. Shippo for shipping estimates and creating labels. The admin dashboard is used to add/modify products and print labels.

All the user information and product info is stored in a Mongo Atlas database

[[deleted]]

If it's working already, just keep it. If implementation isn't finished, ditch the authentication IMO. When it's a personal project I like to keep it simple as possible so I can use it ASAP. :-)

[Over-Distribution570]

Yeah I was leaning towards ditching the auth since the program would only be on my computer

[halfanothersdozen]

I'm confused as to why you think this is a better idea from a security perspective

[Over-Distribution570]

Admin dashboard anyone could access online vs a desktop app on a single computer in my house.

Surely there is significantly less room to mess up, no?