Thanks to visit codestin.com
Credit goes to github.com

Skip to content

docs(docs/admin/users): document login_type=none deprecation and password conversion #27333

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
jakehwll wants to merge 1 commit into from
Closed

docs(docs/admin/users): document login_type=none deprecation and password conversion #27333

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 50 additions & 0 deletions docs/admin/users/headless-auth.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,3 +36,53 @@ Navigate to **Deployment** > **Users** > **Create user**, then select

To make API or CLI requests on behalf of the headless user, learn how to
[generate API tokens on behalf of a user](./sessions-tokens.md#generate-a-long-lived-api-token-on-behalf-of-another-user).

## Deprecation of `login_type=none`

Older Coder versions created passwordless machine users with
`coder users create --login-type none` or the `--disable-login` flag. Creating
these accounts is no longer supported. Use service accounts for
machine-to-machine access instead.

Coder rejects these requests at creation:

- `coder users create --login-type none` fails unless you also pass
`--service-account`:

```text
Login type 'none' requires --service-account.
```

- `--disable-login` is rejected:

```text
--disable-login is deprecated. Use --service-account for machine-to-machine access.
```

- `POST /users` returns `400 Bad Request` for `login_type: "none"` without a
service account:

```text
Login type 'none' requires a service account.
```

Service accounts require a [Premium license](https://coder.com/pricing). On
OSS deployments, create a regular user with password, GitHub, or OIDC
authentication for automation instead. See
[Test templates through CI/CD](../../tutorials/testing-templates.md) for an
example.

### Upgrade behavior

When you upgrade, Coder converts existing non-system `login_type=none` users to
password authentication (`login_type=password`). Their email addresses and
existing API tokens are **preserved**, so token-based automation keeps working
unchanged. System users are not affected.

These accounts have no password set, so an admin must
[reset the password](./index.md#reset-a-password) before the account can log in
through the web UI. Machine access through existing tokens is unaffected.

> [!NOTE]
> This conversion is one-way. Coder does not record which users previously had
> `login_type=none`, so a downgrade cannot restore it.
Loading