CyberMind-FR 10d3272ddd fix(auth+users): production-discovered bugs from live deploy on gk2 (ref #120) ... usersctl: parents[3] indexing crashed when run from /usr/sbin/usersctl (production has only 2 parents). Wrapped path resolution in try/except so the script still works in-tree AND when installed. main.py: nginx strips /api/v1/auth/ prefix before forwarding to the auth socket, so the canonical external URL /api/v1/auth/login was being routed to FastAPI's /login — but _login_router was mounted under /auth, producing 404. Now mounted under BOTH '' (canonical) and /auth (legacy doubled-URL compat). Tests still pass under the /auth prefix. Live verified on https://admin.gk2.secubox.in: - empty password -> setup_token (200) - wrong password -> 401 "Aucun mot de passe local" - unknown user -> 401 "Identifiants incorrects" (same body, no enum) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-13 10:14:32 +02:00
..
usersctl	fix(auth+users): production-discovered bugs from live deploy on gk2 (ref #120)	2026-05-13 10:14:32 +02:00