Thanks to visit codestin.com
Credit goes to github.com

Skip to content

feat: add break-glass user email update - #29256

Draft
johnstcn wants to merge 2 commits into
mainfrom
feat/experimental-user-email-update
Draft

feat: add break-glass user email update#29256
johnstcn wants to merge 2 commits into
mainfrom
feat/experimental-user-email-update

Conversation

@johnstcn

Copy link
Copy Markdown
Member

Adds an owner-only experimental API and hidden CLI command for break-glass user email corrections.

The operation verifies the existing email, updates it transactionally, clears outstanding password-reset state, revokes the target user's Coder sessions and API tokens, and records successful and failed authenticated attempts in the audit log. External-auth links remain unchanged.

Implementation plan
  • Add PUT /api/experimental/users/email accepting old_email and new_email.
  • Restrict access to built-in deployment owners and reject self-updates.
  • Match emails case-insensitively while rejecting case-only changes and conflicts.
  • Atomically update the email, clear OTP state, and delete target API keys.
  • Add coder exp update-user-email with confirmation and --yes support.
  • Cover database behavior, authorization, audit records, credential revocation, validation, and CLI behavior.

Generated by Coder Agents.

@johnstcn johnstcn self-assigned this Sep 11, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Docs preview

Check off each page once it's been reviewed. If a page changes in a later push, its checkbox clears automatically so it gets a fresh look. Pages not yet wired into the docs navigation aren't listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant