Phase 2: Subsonic REST API framework (auth, response formatting, error handling, routing) plus user permission model

internal/web/auth_handlers.go

@@ -137,12 +137,7 @@ func (h *Web) handleSetup(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	hash, err := auth.HashPassword(password)
-	if err != nil {
-		http.Error(w, "internal error", http.StatusInternalServerError)
-		return
-	}
-	user, err := database.CreateUser(h.DB, username, "", hash, true)
+	user, err := database.CreateUser(h.DB, username, "", "", true)
 	if err != nil {
 		render(w, "setup", PageData{
 			Title: "Setup", CSRFToken: h.CSRF.Token(w, r),
@@ -151,6 +146,10 @@ func (h *Web) handleSetup(w http.ResponseWriter, r *http.Request) {
 		})
 		return
 	}
+	if err := auth.SetUserPassword(h.DB, h.EncryptionKey, user.ID, password); err != nil {
+		http.Error(w, "internal error", http.StatusInternalServerError)
+		return
+	}
 
 	folder, err := database.CreateMusicFolder(h.DB, folderName, folderPath, "music")
 	if err != nil {