Replace Auth.js with stateless authentication, preserving native forms and YAML settings.
Fixed seven-day sessions without renewal; OIDC identities must supply an email.
All three planned auth commits are included. SvelteKit 3 follows in a separate PR.
Verification
Cutover: code/readability reviews approved; schema, types, lint and builds passed.
455 web unit/process tests and 30 selected browser tests passed, including OIDC.
Final documentation: lint, schema and example-config validation passed; wording preserved.
## Scope
- Replace Auth.js with stateless authentication, preserving native forms and YAML settings.
- Fixed seven-day sessions without renewal; OIDC identities must supply an email.
- All three planned auth commits are included. SvelteKit 3 follows in a separate PR.
## Verification
- Cutover: code/readability reviews approved; schema, types, lint and builds passed.
- 455 web unit/process tests and 30 selected browser tests passed, including OIDC.
- Final documentation: lint, schema and example-config validation passed; wording preserved.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Scope
Verification
f8a0ae8922tod7978f3512