fix: discover Login Flow v2 users in OAuth mode user manager

When enable_login_flow is true, also check the app_passwords table
for provisioned users. Previously, OAuth mode only queried the
refresh_tokens table, missing users who were provisioned via
Login Flow v2 (which stores app passwords, not refresh tokens).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Chris Coutinho
2026-03-30 00:48:02 +02:00
co-authored by Claude Opus 4.6
parent eefede8c47
commit 474cfe5e98
2 changed files with 9 additions and 0 deletions
@@ -496,6 +496,14 @@ async def user_manager_task(
else:
# OAuth mode: query refresh_tokens table
provisioned_users = set(await refresh_token_storage.get_all_user_ids())
# Login Flow mode: also check app_passwords table
# (users provisioned via Login Flow v2 have app passwords,
# not refresh tokens)
if settings.enable_login_flow:
app_pw_users = set(
await refresh_token_storage.get_all_app_password_user_ids()
)
provisioned_users |= app_pw_users
active_users = set(user_states.keys())
# Start scanners for new users