2 commits

Author	SHA1	Message	Date
Julian Appel	847f4e9493	Harden user management integration	2026-09-28 22:42:03 +02:00
Grovy311	c56cfb30ad	Add login-required user management (admin/user roles, Config->Benutzer) ... No self-signup: admins create every account in Config -> Benutzer with a typed start password; a forced password change gates first use. Session- cookie auth protects all /api/* routes; /api/users additionally requires the admin role. See docs/authentication.md. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-28 19:51:47 +02:00