Remove local login bypass

src/TaxBaik.Web/Services/AuthService.cs

@@ -46,18 +46,6 @@ public class AuthService
         }
         catch (Exception ex) when (_environment.IsDevelopment())
         {
-            if (IsLocalE2ETestCredentials(username, password))
-            {
-                _logger.LogWarning(ex, "개발 환경에서 DB 없이 로컬 E2E 관리자 로그인 허용: {Username}", username);
-                return AuthResult.Success(GenerateTokenPair(new AdminUser
-                {
-                    Id = 0,
-                    Username = username,
-                    PasswordHash = string.Empty,
-                    CreatedAt = DateTime.UtcNow
-                }));
-            }
-
             _logger.LogWarning(ex, "개발 환경에서 관리자 로그인 DB 조회 실패: {Username}", username);
             return AuthResult.DatabaseUnavailable();
         }
@@ -70,18 +58,6 @@ public class AuthService
         if (user == null)
         {
             _logger.LogWarning("로그인 시도: 존재하지 않는 사용자 '{Username}'", username);
-            if (_environment.IsDevelopment() && IsLocalE2ETestCredentials(username, password))
-            {
-                _logger.LogWarning("개발 환경에서 시드 계정 없이 로컬 E2E 관리자 로그인 허용: {Username}", username);
-                return AuthResult.Success(GenerateTokenPair(new AdminUser
-                {
-                    Id = 0,
-                    Username = username,
-                    PasswordHash = string.Empty,
-                    CreatedAt = DateTime.UtcNow
-                }));
-            }
-
             return AuthResult.InvalidCredentials();
         }
 
@@ -265,9 +241,6 @@ public class AuthService
             && System.Security.Cryptography.CryptographicOperations.FixedTimeEquals(valueBytes, expectedBytes);
     }
 
-    private static bool IsLocalE2ETestCredentials(string username, string password) =>
-        string.Equals(username, "test_admin", StringComparison.OrdinalIgnoreCase) &&
-        string.Equals(password, "admin123", StringComparison.Ordinal);
 }
 
 public class AuthTokenPair(string accessToken, string refreshToken, int expiresIn)