Indiana f5320fcdec feat: guest passage — slip through as a wanderer ...

POST /auth/guest mints a real user row (wanderer-<4 hex>, collision
retry, unusable random password) and issues the normal session cookie,
per-IP rate limited at 5/hour. EnterPage gains the guest action;
the séance shows a dismissible claim-a-name note for wanderer- users.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-28 17:18:16 +00:00

5.9 KiB

Raw Blame History

View Raw