A new hub hands administrator to whoever registers first issue #245 closed: completed andymccall opened this 19 days ago · 0 comments

On a hub with no accounts, /register makes the first account an administrator without an invitation, whatever registration mode says (web/session.rs). On 2026-10-16 the fresh GCP hub at gcp.oxygenhub.io was public for about an hour like this until Andy stopped its VM. A new hub must start closed: the first administrator is made with 'oxygenhub admin user create --admin', or by registering with a one-time setup code that init writes to the data directory and the server's log (never served over the web), and no first-account rule otherwise. Tests: an empty hub refuses /register without the code; with it, the account is admin and the code is spent.