Part of #2914 (one click from a stranger to their own forge).
/claim (web/pages/claim.ts) needs a username, an email and a passkey. Make it take what #2923 takes: username + password, email optional, passkey still offered. The checks are shared with signup, not copied.
Done when POST /claim with a token, username and password makes the child's first admin and signs them in, and the existing tests (one use only, expired, already owned) still pass with the password form.
Part of #2914 (one click from a stranger to their own forge).
/claim(web/pages/claim.ts) needs a username, an email and a passkey. Make it take what #2923 takes: username + password, email optional, passkey still offered. The checks are shared with signup, not copied.Done when
POST /claimwith a token, username and password makes the child's first admin and signs them in, and the existing tests (one use only, expired, already owned) still pass with the password form.