UserRepository backed by an upstream HTTP user service ("the Store").
Both endpoints receive plaintext user credentials, so both are validated at
construction: a deployment configured with an http:// Store URL fails
at boot rather than leaking the first user's password (#285). http:// is
accepted for loopback hosts only — see src/endpointUrl.mts for the
carve-out and its rationale.
UserRepositorybacked by an upstream HTTP user service ("the Store").Both endpoints receive plaintext user credentials, so both are validated at construction: a deployment configured with an
http://Store URL fails at boot rather than leaking the first user's password (#285).http://is accepted for loopback hosts only — seesrc/endpointUrl.mtsfor the carve-out and its rationale.