admin
6d21576e00
workout-system: SparkyFitness OIDC-only auth (email login+signup off, OIDC signup on)
Admin bootstrapped via Authentik OIDC. Finalize the intended auth posture:
- Remove SPARKY_FITNESS_FORCE_EMAIL_LOGIN fail-safe (OIDC confirmed working).
- Add SPARKY_FITNESS_DISABLE_EMAIL_LOGIN=true -> email/password login + registration off.
- Keep SPARKY_FITNESS_DISABLE_SIGNUP=false so OIDC auto-register keeps working
(the global signup gate would otherwise block OIDC self-registration too).
Net: Authentik OIDC is the only login + signup path; emergency recovery documented
inline (set FORCE_EMAIL_LOGIN=true to re-enable email login).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>