v0.30.1

Added

• auth.password config key. It is false by default: the login card shows only provider buttons, the login form and the profile password form refuse a password, and SessionRoot::login() returns false. Set "auth": {"password": true} to keep password sign-in.
• phlat throttle:clear resets the login throttle for every IP.
• SessionRoot::clearThrottle() with no key clears every key.

Changed

• An oidc provider missing required config throws a RuntimeException naming the problems when sign-in starts.

Fixed

• Signing in again with an OIDC provider failed with "User already exists", because the oidc identity was never indexed. Run phlat registry:rebuild after updating.