hyrax/app/models/user.rb

@@ -78,7 +78,7 @@ class User < ApplicationRecord
     if ENV.fetch('ORCID_RESTRICT_AUTHORIZATION', 'true') == 'false'
       user.display_name = auth.info.name
       user.email = auth.info.email || "#{auth.uid}@#{auth.provider.to_s}"
-      user.password = Devise.friendly_token[0,20]
+      user.password = SecureRandom.random_bytes(32)
     end
     user.save!
     user
@@ -108,7 +108,7 @@ class User < ApplicationRecord
     user.uid = attributes[:uid]
     user.display_name = attributes[:name]
     user.email = attributes[:email]
-    user.password = Devise.friendly_token[0,20]
+    user.password = SecureRandom.random_bytes(32)
 
     user.save!
     user

hyrax/seed/crc_users.json

-{
-  "users": [
-    {
-      "email": "user@hyrax",
-      "password": "password",
-      "name": "Demo user",
-      "affiliation": "",
-      "orcid": "",
-      "role": ["CRC manager"]
-    },
-    {
-      "email": "user2@hyrax",
-      "password": "password",
-      "name": "Demo user 2",
-      "affiliation": "",
-      "orcid": "",
-      "role": ["CRC member"]
-    },
-    {
-      "email": "user3@hyrax",
-      "password": "password",
-      "name": "Demo user 3",
-      "affiliation": "",
-      "orcid": "",
-      "role": ["CRC member","A01 manager"]
-    },
-    {
-      "email": "user4@hyrax",
-      "password": "password",
-      "name": "Demo user 4",
-      "affiliation": "",
-      "orcid": "",
-      "role": ["CRC member","A01 member"]
-    }
-  ]
-}