{"repo":"NousResearch/hermes-agent","public_id":"110069","display_label":"Dashboard basic auth silent lockout bug and fixes","summary":"A bug where malformed or empty scrypt password hashes are silently accepted, locking users out of the dashboard. The group includes the bug report and two fix attempts targeting CLI and dashboard auth validation.","subsystem":"dashboard","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":2,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":110069,"title":"[Bug]: dashboard.basic_auth accepts a malformed password_hash and an empty password — silent lockout","url":null,"state":"open"},{"kind":"pr","number":110077,"title":"fix(cli): reject dashboard.basic_auth writes that silently lock out the dashboard","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":110114,"title":"fix(dashboard-auth): reject malformed scrypt password_hash instead of silent lockout","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#110092","number":110092},{"kind":"pr","value":"#110077","number":110077},{"kind":"pr","value":"#110069","number":110069}],"category":"duplicate_of","implication":"duplicate"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}