coder
diff --git a/‎coderd/database/dump.sql
Lines changed: 4 additions & 1 deletion b/‎coderd/database/dump.sql
Lines changed: 4 additions & 1 deletion
diff --git a/‎coderd/database/models.go
Lines changed: 5 additions & 1 deletion b/‎coderd/database/models.go
Lines changed: 5 additions & 1 deletion
diff --git a/‎coderd/users.go
Lines changed: 21 additions & 8 deletions b/‎coderd/users.go
Lines changed: 21 additions & 8 deletions
diff --git a/‎codersdk/users.go
Lines changed: 6 additions & 3 deletions b/‎codersdk/users.go
Lines changed: 6 additions & 3 deletions
@@ -351,21 +351,34 @@ func (api *API) postUser(rw http.ResponseWriter, r *http.Request) {
 		}
 	}
 
-	err = userpassword.Validate(req.Password)
-	if err != nil {
+	if req.DisableLogin && req.Password != "" {
 		httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
-			Message: "Password not strong enough!",
-			Validations: []codersdk.ValidationError{{
-				Field:  "password",
-				Detail: err.Error(),
-			}},
+			Message: "Cannot set password when disabling login.",
 		})
 		return
 	}
 
+	var loginType database.LoginType = "unknown"
+	if req.DisableLogin {
+		loginType = database.LoginTypeNone
+	} else {
+		err = userpassword.Validate(req.Password)
+		if err != nil {
+			httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
+				Message: "Password not strong enough!",
+				Validations: []codersdk.ValidationError{{
+					Field:  "password",
+					Detail: err.Error(),
+				}},
+			})
+			return
+		}
+		loginType = database.LoginTypePassword
+	}
+
 	user, _, err := api.CreateUser(ctx, api.Database, CreateUserRequest{
 		CreateUserRequest: req,
-		LoginType:         database.LoginTypePassword,
+		LoginType:         loginType,
 	})
 	if dbauthz.IsNotAuthorizedError(err) {
 		httpapi.Write(ctx, rw, http.StatusForbidden, codersdk.Response{
 
@@ -66,9 +66,12 @@ type CreateFirstUserResponse struct {
 }
 
 type CreateUserRequest struct {
-	Email          string    `json:"email" validate:"required,email" format:"email"`
-	Username       string    `json:"username" validate:"required,username"`
-	Password       string    `json:"password" validate:"required"`
+	Email    string `json:"email" validate:"required,email" format:"email"`
+	Username string `json:"username" validate:"required,username"`
+	Password string `json:"password" validate:"required"`
+	// DisableLogin sets the user's login type to 'none'. This prevents the user
+	// from being able to use a password or any other authentication method to login.
+	DisableLogin   bool      `json:"disable_login"`
 	OrganizationID uuid.UUID `json:"organization_id" validate:"" format:"uuid"`
 }
Original file line number	Diff line number	Diff line change
`@@ -66,9 +66,12 @@ type CreateFirstUserResponse struct {`
`66`	`66`	`}`
`67`	`67`
`68`	`68`	`type CreateUserRequest struct {`
`69`		- Email string `json:"email" validate:"required,email" format:"email"`
`70`		- Username string `json:"username" validate:"required,username"`
`71`		- Password string `json:"password" validate:"required"`
	`69`	+ Email string `json:"email" validate:"required,email" format:"email"`
	`70`	+ Username string `json:"username" validate:"required,username"`
	`71`	+ Password string `json:"password" validate:"required"`
	`72`	`+ // DisableLogin sets the user's login type to 'none'. This prevents the user`
	`73`	`+ // from being able to use a password or any other authentication method to login.`
	`74`	+ DisableLogin bool `json:"disable_login"`
`72`	`75`	OrganizationID uuid.UUID `json:"organization_id" validate:"" format:"uuid"`
`73`	`76`	`}`
`74`	`77`