ilpanich / axiam / 29646961949

91%

push

github

fix(benchmarks): don't set AXIAM__AUTH__PEPPER (breaks bootstrap-admin login)

Setting a pepper made the bootstrap admin un-loggable: the server's
bootstrap handler hashes the admin password without the pepper
(hash_password(.., None)) while login verifies with it, so 'invalid
credentials' aborted seeding. Leave the pepper unset until the server
bootstrap is fixed to apply it; the other subsystem secrets (MFA/email
encryption, GDPR pepper, OIDC issuer) are unaffected and stay set.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NEQ27rSiTYmitP6MaVnBTp

1682 of 1859 branches covered (90.48%)

Branch coverage included in aggregate %.

27336 of 33350 relevant lines covered (81.97%)

71.1 hits per line