Frederic Cabassut e4606cfc70 feat(auth): enable password login on OAuth-only accounts, with disable control ...

Admins can now reset the password of an OAuth-only user, which creates
their credentials and enables password login; the new 'Disable password
login' row action removes those credentials again. Resetting a password
revokes all existing sessions.

- add users.password_login_enabled column (migration 0005)
- admin reset: set password, enable login, revoke sessions
- disable action: clear password, disable login (only on OAuth-linked rows)
- account endpoint: refuse password updates on OAuth-linked users
- e2e: wipe the test DB before the webServer starts (Playwright starts
  the server before globalSetup, so wiping there orphaned the DB file)
- row-actions strip test: five square actions, wrap on phone widths

2026-08-19 13:18:56 +02:00

..

e2e

feat(auth): enable password login on OAuth-only accounts, with disable control

2026-08-19 13:18:56 +02:00