Init an admin user in prod closes #381

## Description of the implemented changes The changes were: - [ ] Bugfixing - [x] New Feature - [ ] Breaking Change - [ ] Refactoring  ## What has been changed?  ## Definition of Done ### Code Quality - [x] No new technical depths - [x] Linting passed - [x] Documentation is added were needed ### Accessibility - [ ] New elements are properly defined with html-tags - [ ] Colour contrast follows WCAG criteria - [ ] Aria labels are added when needed - [ ] Everything is accessible by keyboard - [ ] Tab-Order is comprehensible - [ ] All interactive elements have a visible focus ### Testing - [x] Tests for new code are written - [x] All tests pass - [ ] axe-core dev tools show no critical or major issues ## Additional Notes

moritz added this to the Accounts & Logins milestone

moritz self-assigned this

moritz force-pushed feature/381_init_admin from f59ed30d48

continuous-integration/drone/push Build was killed

Details

to d573a22769

continuous-integration/drone/push Build is passing

2026-02-04 18:13:37 +01:00

Compare

moritz added 1 commit

2026-02-04 19:48:53 +01:00

Code-review follow-ups: policy, docs, seed_admin behaviour

c5f1fdce0a

- Use OidcRoleSyncContext for set_role_from_oidc_sync; document JWT peek risk.
- seed_admin without password sets Admin role on existing user (OIDC-only); update docs and test.
- Fix DE translation for 'access this page'; add get? true comment in User.

moritz changed title from ~~WIP: Init an admin user in prod closes #381~~ to Init an admin user in prod closes #381

2026-02-04 19:49:30 +01:00

2026-02-04 20:34:13 +01:00

OIDC sign-in: robust after_action for get? result, non-bang role sync

continuous-integration/drone/promote/production Build is passing

ad42a53919

- sign_in_with_rauthy after_action normalizes result (nil/struct/list) to list before Enum.each.
- OidcRoleSync.do_set_role uses Ash.update and swallows errors so auth is not blocked; skip update if role already correct.

moritz merged commit 6ab0365a8c into main

2026-02-04 20:53:02 +01:00

moritz deleted branch feature/381_init_admin

2026-02-04 20:53:03 +01:00

moritz referenced this pull request from a commit

2026-02-04 20:53:04 +01:00

Merge pull request 'Init an admin user in prod closes #381' (#409) from feature/381_init_admin into main

Rows
Columns

Init an admin user in prod closes #381 #409

Description of the implemented changes

What has been changed?

Definition of Done

Code Quality

Accessibility

Testing

Additional Notes