Users

Users

Everyone in the household gets their own account. It costs nothing and makes the Journal worth reading — "who took the last one" only has an answer if the app knows who was booking.

Administrators manage accounts under Users.

Roles

Role	May do
User	everything to do with food: stock, scanning, stocktake, items, recipes, meal plan, ordering, deliveries, journal
Admin	all of that, plus manage users and storage locations

Most households need exactly one admin. Everyday work never requires the role.

Creating and editing

+ New user asks for username, email, password and role. Usernames need at least three characters and may contain letters, digits, dot, underscore and hyphen; passwords at least six.

Edit changes email, role and — optionally — the password. Leave the password field empty to keep the current one.

Two guards worth knowing:

• You cannot remove your own admin role, otherwise nobody could get back in.
• You cannot delete yourself, and the last remaining user cannot be deleted.

Resetting someone's password signs them out everywhere. That is deliberate: a reset is what you do when an account may be compromised.

Signing in

Sessions last 30 days and live in an httpOnly cookie. Passwords are stored as scrypt hashes — the app never keeps a readable copy, which is also why nobody can look one up for you.

Failed logins

After five failed attempts a username is locked temporarily: one minute at first, doubling with each further failure, up to a maximum of 15 minutes. After an hour without a failure the counter resets.

Locks are always temporary by design — a permanent lockout would be a way to lock family members out of their own pantry.

The lock counts per entered username, including names that do not exist, and the app takes the same amount of time to answer either way. Both are deliberate: otherwise the login form would reveal which accounts exist.