Claude 387db52510 Fix player getAccount has_password: read the raw row, not sanitized req.user ...

req.user comes from getById which strips password_hash, so has_password was
always false — the account page mis-rendered a real password account as the
SSO-only 'set a password' variant (and the change-password form omitted the
required current-password field). Read the raw row for that one flag.

Caught by a browser click-through of the /account portal. Adds a regression
test.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019rao86n5cXpwAyjdBFEshV

2026-07-06 05:11:36 -05:00

..

db

Player accounts frontend + Swagger + schema comment fix

2026-07-06 01:49:12 -05:00

src

Fix player getAccount has_password: read the raw row, not sanitized req.user

2026-07-06 05:11:36 -05:00

swagger

Player accounts frontend + Swagger + schema comment fix

2026-07-06 01:49:12 -05:00

test

Fix player getAccount has_password: read the raw row, not sanitized req.user

2026-07-06 05:11:36 -05:00

.env.example

Isolate internal bot-config route from the public listener (#33)

2026-07-04 17:35:07 -05:00

package-lock.json

Add Swagger/OpenAPI API docs (swagger-ui + swagger-autogen)

2026-07-03 15:28:13 -05:00

package.json

Add Swagger/OpenAPI API docs (swagger-ui + swagger-autogen)

2026-07-03 15:28:13 -05:00