Files
zeekay c7e1540e8f apis,forms,plugins: rip password cascade from consumers
- forms/RecordUpsert no longer manages a plain password / confirm /
  oldPassword triple; Load + validateFormFields only handle the
  email + verified system fields now. DrySubmit + Submit semantics
  unchanged
- apis/installer + apis/superuser_auth_oidc drop SetRandomPassword;
  the installer superuser and the OIDC auto-create path persist a
  verified passwordless record (IAM handles credentials)
- apis/collection_test snapshots updated for the slimmer auth
  collection bootstrap (no system "password" field) and the smaller
  collection inventory (12 not 16); the now-stale "create-base-
  collection-with-oldPassword-rejected" test is deleted because the
  reserved-key check is gone
- plugins/jsvm drops the PasswordField bind
- plugins/zap returns 410 Gone for /identity (the only ZAP path
  that called record.ValidatePassword) — IAM PKCE is the only login
- plugins/migratecmd test no longer probes a PasswordResetToken
  secret on auth collections
- tests/dynamic_stubs loses StubMFARecords + StubOTPRecords;
  tests/token_helper loses GetUserPasswordResetToken
2026-05-15 03:19:15 -07:00
..
2025-02-10 11:58:49 -06:00