From eed53c96fbbef29c60d056be8bbcb18c7f5d53b2 Mon Sep 17 00:00:00 2001
From: matst80 <mats.tornberg@gmail.com>
Date: Sun, 5 Jul 2026 14:14:02 +0200
Subject: [PATCH] fix

---
 internal/customerauth/store.go | 5 +++++
 pkg/promotions/store.go        | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/internal/customerauth/store.go b/internal/customerauth/store.go
index 3910e86..10bb0d6 100644
--- a/internal/customerauth/store.go
+++ b/internal/customerauth/store.go
@@ -174,6 +174,11 @@ func (s *CredentialStore) persistLocked() error {
 		return fmt.Errorf("customerauth: temp file: %w", err)
 	}
 	tmpName := tmp.Name()
+	if err := tmp.Chmod(0644); err != nil {
+		tmp.Close()
+		os.Remove(tmpName)
+		return fmt.Errorf("customerauth: chmod temp: %w", err)
+	}
 	if _, err := tmp.Write(data); err != nil {
 		tmp.Close()
 		os.Remove(tmpName)
diff --git a/pkg/promotions/store.go b/pkg/promotions/store.go
index e2d0c17..976f223 100644
--- a/pkg/promotions/store.go
+++ b/pkg/promotions/store.go
@@ -128,6 +128,10 @@ func (s *Store) saveLocked() error {
 	}
 	tmpName := tmp.Name()
 	defer os.Remove(tmpName) // no-op once renamed
+	if err := tmp.Chmod(0644); err != nil {
+		tmp.Close()
+		return err
+	}
 	if _, err := tmp.Write(data); err != nil {
 		tmp.Close()
 		return err