Recover administrator access

Recovery is deliberately available only from a private terminal on the Alexandria server.

Secure recovery procedure

  1. Sign in locally to the Mac that runs Alexandria.
  2. Stop the Alexandria service so active console sessions are invalidated and the OAuth state file cannot be changed concurrently.
  3. From the installed Alexandria service directory, load the same ALEX_OAUTH_STATE_FILE value used by the service.
  4. Run npm run oauth:reset -- <administrator-username> and enter the new password privately when prompted.
  5. Restart the service and sign in with the new password.

The reset preserves the existing account and permissions, revokes its access and refresh tokens, and never displays or transmits the old password. Connected apps for this account must authorize again.

Return to administrator sign-in