steve 81f2852eb1 http: POST /setup — set password, drop session, audit setup_completed ...

Replaces the 501 stub with the full handler: validates the token and
password, hashes and stores the password, deletes the setup token,
mints an 8-hour session cookie, appends a user.setup_completed audit
entry, and redirects to /. Adds TestSetupPostHappyPath covering the
full round-trip including normal-login verification after setup.

2026-05-05 10:57:24 +01:00

..

agent

test: lock-protect fakeSender so -race CI passes

2026-05-04 18:01:35 +01:00

alert

feat(alerts): per-source-group dedup so two failing backups produce two alerts

2026-05-04 22:59:48 +01:00

api

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

auth

ci: shard test job + cheap argon2 in test mode

2026-05-05 08:40:50 +01:00

crypto

P3 follow-up: editable target dir, conditional --no-ownership, UK lint

2026-05-04 17:27:52 +01:00

notification

feat(channels): include event verb in ntfy title + smtp subject (#10)

2026-05-04 22:25:38 +00:00

restic

P3 wrap: agent auto-creates restore target; tasks.md ticked

2026-05-04 17:51:34 +01:00

server

http: POST /setup — set password, drop session, audit setup_completed

2026-05-05 10:57:24 +01:00

store

store: DeleteSessionsByUserID for force-logout

2026-05-05 10:57:24 +01:00