• 
      

    Update user API to allow creating users without a password.

    Review Request #14450 — Created June 4, 2025 and submitted — Latest diff uploaded

    Information

    Review Board
    release-7.x

    Reviewers

    It's extremely common now to have authentication driven by LDAP/AD
    and/or SAML SSO. With this, admins increasingly want to provision users
    separately instead of just letting a successful authentication create
    the user account.

    This change makes it possible to do a POST to the /api/users/ endpoint
    without a password set, which will create the user with an unusable
    password.

    Ran unit tests.

    Commits

    Files