Grant Whitmer 3a9259a0da G5: generate an unusable password on Gitea user create ...

Gitea rejects a null password with a bare 400. These accounts are never
password-authenticated — humans arrive via OIDC, agents via passport-bound
scoped tokens, local password sign-in is disabled server-wide — so we generate
a credential that is never stored, returned or recoverable. An unusable
password is safer than a blank one or a shared default.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-11 15:55:11 -04:00

..

app

G5: generate an unusable password on Gitea user create

2026-08-11 15:55:11 -04:00

tests

G5: the shelter — repos, grants and version history

2026-08-11 15:45:22 -04:00