add flag for automated accounts and fix password fields using username configs

config.maple

···
 
 	password_min_len = 12
 	password_max_len = 72
-	password_pattern = '(.|\s)+'
+	password_pattern = '.+'
 
 	pronouns_min_len = 0
 	pronouns_max_len = 30

doc/database_spec.md

···
 | `password_salt` | string    | salt for this user's password                    |
 | `muted`         | bool      | controls whether or not this user can make posts |
 | `admin`         | bool      | controls whether or not this user is an admin    |
+| `automated`     | bool      | controls whether or not this user is automated   |
 | `theme`         | ?string   | controls per-user css themes                     |
 | `bio`           | string    | bio for this user                                |
 | `pronouns`      | string    | pronouns for this user                           |

src/database/user.v

···
 	return true
 }
 
+// set_automated sets the given user's automated status, returns true if this
+// succeeded and false otherwise.
+pub fn (app &DatabaseAccess) set_automated(user_id int, automated bool) bool {
+	sql app.db {
+		update User set automated = automated where id == user_id
+	} or {
+		eprintln('failed to update automated status for ${user_id}')
+		return false
+	}
+	return true
+}
+
 // set_theme sets the given user's theme url, returns true if this succeeded and
 // false otherwise.
 pub fn (app &DatabaseAccess) set_theme(user_id int, theme ?string) bool {

src/entity/user.v

···
 	password      string
 	password_salt string
 
-	muted bool
-	admin bool
+	muted     bool
+	admin     bool
+	automated bool
 
 	theme string
 

src/main.v

···
 
 @[inline]
 fn load_validators(mut app App) {
-	app.validators.username = StringValidator.new(app.config.user.username_min_len, app.config.user.username_max_len, app.config.user.username_pattern)
-	app.validators.password = StringValidator.new(app.config.user.username_min_len, app.config.user.username_max_len, app.config.user.username_pattern)
-	app.validators.nickname = StringValidator.new(app.config.user.nickname_min_len, app.config.user.nickname_max_len, app.config.user.nickname_pattern)
-	app.validators.user_bio = StringValidator.new(app.config.user.bio_min_len, app.config.user.bio_max_len, app.config.user.bio_pattern)
-	app.validators.pronouns = StringValidator.new(app.config.user.pronouns_min_len, app.config.user.pronouns_max_len, app.config.user.pronouns_pattern)
-	app.validators.post_title = StringValidator.new(app.config.post.title_min_len, app.config.post.title_max_len, app.config.post.title_pattern)
-	app.validators.post_body = StringValidator.new(app.config.post.body_min_len, app.config.post.body_max_len, app.config.post.body_pattern)
+	app.validators.username = StringValidator.new(app.config.user.username_min_len,app.config.user.username_max_len,app.config.user.username_pattern)
+	app.validators.password = StringValidator.new(app.config.user.password_min_len,app.config.user.password_max_len,app.config.user.password_pattern)
+	app.validators.nickname = StringValidator.new(app.config.user.nickname_min_len,app.config.user.nickname_max_len,app.config.user.nickname_pattern)
+	app.validators.user_bio = StringValidator.new(app.config.user.bio_min_len,app.config.user.bio_max_len,app.config.user.bio_pattern)
+	app.validators.pronouns = StringValidator.new(app.config.user.pronouns_min_len,app.config.user.pronouns_max_len,app.config.user.pronouns_pattern)
+	app.validators.post_title = StringValidator.new(app.config.post.title_min_len,app.config.post.title_max_len,app.config.post.title_pattern)
+	app.validators.post_body = StringValidator.new(app.config.post.body_min_len,app.config.post.body_max_len,app.config.post.body_pattern)
 }
 
 fn main() {

src/templates/settings.html

···
 
 <hr>
 
+<form action="/api/user/set_automated" method="post">
+	<label for="is_automated">is automated:</label>
+	<input
+		type="checkbox"
+		name="is_automated"
+		id="is_automated"
+		value="true"
+		@if user.automated
+		checked aria-checked
+		@end
+	>
+	<input type="submit" value="save">
+	<p>automated accounts are primarily intended to tell users that this account makes posts automatically.</p>
+	<p>it will also hide most front-end interactions since the user of this account likely will not be using those very often.</p>
+</form>
+
+<hr>
+
 <details>
 	<summary>dangerous settings (click to reveal)</summary>
 
+	<br>
+
 	<details>
 		<summary>change password (click to reveal)</summary>
 		<form action="/api/user/set_password" method="post">
···
 				required aria-required
 				autocomplete="off" aria-autocomplete="off"
 			>
+			<br>
 			<label for="new_password">new password:</label>
 			<input
 				type="password"
···
 			<input type="submit" value="save">
 		</form>
 	</details>
+
+	<br>
 
 	<details>
 		<summary>account deletion (click to reveal)</summary>

src/templates/user.html

···
 	(@viewing.pronouns)
 	@end
 
-	@if viewing.muted && viewing.admin
-	[muted admin, somehow]
-	@else if viewing.muted
+	@if viewing.muted
 	[muted]
-	@else if viewing.admin
+	@end
+
+	@if viewing.automated
+	[automated]
+	@end
+
+	@if viewing.admin
 	[admin]
 	@end
 </h1>
 
 @if app.logged_in_as(mut ctx, viewing.id)
-<script src="/static/js/text_area_counter.js"></script>
-
 <p>this is you!</p>
 
+@if !user.automated
+<script src="/static/js/text_area_counter.js"></script>
 <div>
 	<form action="/api/post/new_post" method="post">
 		<h2>new post:</h2>
···
 	</script>
 </div>
 <hr>
+@end
 @end
 
 @if viewing.bio != ''

src/webapp/api.v

···
 		)
 		token := app.auth.add_token(x.id, ctx.ip()) or {
 			eprintln(err)
-			ctx.error('could not create token for user with id ${x.id}')
+			ctx.error('api_user_register: could not create token for user with id ${x.id}')
 			return ctx.redirect('/')
 		}
 		ctx.set_cookie(
···
 			path:      '/'
 		)
 	} else {
-		eprintln('could not log into newly-created user: ${user}')
+		eprintln('api_user_register: could not log into newly-created user: ${user}')
 		ctx.error('could not log into newly-created user.')
 	}
 
···
 		return ctx.redirect('/settings')
 	}
 
-	// invalidate tokens
+	hashed_new_password := auth.hash_password_with_salt(new_password, user.password_salt)
+	if !app.set_password(user.id, hashed_new_password) {
+		ctx.error('failed to update password')
+		return ctx.redirect('/settings')
+	}
+
+	// invalidate tokens and log out
 	app.auth.delete_tokens_for_user(user.id) or {
 		eprintln('failed to yeet tokens during password deletion for ${user.id} (${err})')
 		return ctx.redirect('/settings')
 	}
-
-	hashed_new_password := auth.hash_password_with_salt(new_password, user.password_salt)
-
-	if !app.set_password(user.id, hashed_new_password) {
-		ctx.error('failed to update password')
-	}
+	ctx.set_cookie(
+		name:      'token'
+		value:     ''
+		same_site: .same_site_none_mode
+		secure:    true
+		path:      '/'
+	)
 
 	return ctx.redirect('/login')
 }
···
 	}
 }
 
+@['/api/user/set_automated'; post]
+fn (mut app App) api_user_set_automated(mut ctx Context, is_automated bool) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('you are not logged in!')
+		return ctx.redirect('/login')
+	}
+
+	if !app.set_automated(user.id, is_automated) {
+		ctx.error('failed to set automated status.')
+	}
+
+	return ctx.redirect('/me')
+}
+
 @['/api/user/set_theme'; post]
 fn (mut app App) api_user_set_theme(mut ctx Context, url string) veb.Result {
 	if !app.config.instance.allow_changing_theme {
···
 	return ctx.text(user.get_name())
 }
 
-/// user/notification ///
-
-@['/api/user/notification/clear']
-fn (mut app App) api_user_notification_clear(mut ctx Context, id int) veb.Result {
-	user := app.whoami(mut ctx) or {
-		ctx.error('you are not logged in!')
-		return ctx.redirect('/login')
-	}
-
-	if notification := app.get_notification_by_id(id) {
-		if notification.user_id != user.id {
-			ctx.error('no such notification for user')
-			return ctx.redirect('/inbox')
-		} else {
-			if !app.delete_notification(id) {
-				ctx.error('failed to delete notification')
-				return ctx.redirect('/inbox')
-			}
-		}
-	} else {
-		ctx.error('no such notification for user')
-	}
-
-	return ctx.redirect('/inbox')
-}
-
-@['/api/user/notification/clear_all']
-fn (mut app App) api_user_notification_clear_all(mut ctx Context) veb.Result {
-	user := app.whoami(mut ctx) or {
-		ctx.error('you are not logged in!')
-		return ctx.redirect('/login')
-	}
-	if !app.delete_notifications_for_user(user.id) {
-		ctx.error('failed to delete notifications')
-		return ctx.redirect('/inbox')
-	}
-	return ctx.redirect('/inbox')
-}
-
 @['/api/user/delete']
 fn (mut app App) api_user_delete(mut ctx Context, id int) veb.Result {
 	user := app.whoami(mut ctx) or {
···
 	}
 	users := app.search_for_users(query, limit, offset)
 	return ctx.json[[]User](users)
+}
+
+/// user/notification ///
+
+@['/api/user/notification/clear']
+fn (mut app App) api_user_notification_clear(mut ctx Context, id int) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('you are not logged in!')
+		return ctx.redirect('/login')
+	}
+
+	if notification := app.get_notification_by_id(id) {
+		if notification.user_id != user.id {
+			ctx.error('no such notification for user')
+			return ctx.redirect('/inbox')
+		} else {
+			if !app.delete_notification(id) {
+				ctx.error('failed to delete notification')
+				return ctx.redirect('/inbox')
+			}
+		}
+	} else {
+		ctx.error('no such notification for user')
+	}
+
+	return ctx.redirect('/inbox')
+}
+
+@['/api/user/notification/clear_all']
+fn (mut app App) api_user_notification_clear_all(mut ctx Context) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('you are not logged in!')
+		return ctx.redirect('/login')
+	}
+	if !app.delete_notifications_for_user(user.id) {
+		ctx.error('failed to delete notifications')
+		return ctx.redirect('/inbox')
+	}
+	return ctx.redirect('/inbox')
 }
 
 ////// post //////