An added member's welcome lets them set their first password

Shipped

October 28, 2026 at 11:10 PM UTC

Author

Kamo

Commit

2337fad

A member an administrator adds has no password, so the plain WELCOME's Sign in button led nowhere. Send WELCOME_SET_PASSWORD instead when the account has no password: a set-password link and code, valid seven days, minted by the same token path as forgot-password (extracted as mintToken). The link carries setup=1 so kamo-login words the page for a first password.